GalaSoft[.]MvvmLight[.]dll | Triage

Sharing

General

Target

GalaSoft.MvvmLight.dll
Size

40KB
MD5

f447dc24e58dd67494a362e185eee9cc
SHA1

25c1049b194587207eedfb5759798ae9e8aaf0a6
SHA256

b022f1db20d5271cb3a10bfc89eb5303ab4403fbe539289e33bcff2182bde84c
SHA512

711d2dd8f2f8c73b728a4b349a1eb5f70aecc41b54ce72ae9fc7ba5548459eda29e792a19a645ef61b031d198e2d937e9d481f15befc9f0c5b2f6a426dcbab70
SSDEEP

768:FnVF+heuJxTH6yaDSpAyYZbT0gJHTCNQYRWCiD5MaIN7UAifpzNJ2Ox/KpEsD+:FVKLY5T0gUNQQiltEifpv2sCW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
GalaSoft.MvvmLight.dll

Files

GalaSoft.MvvmLight.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\lbugn\Documents\MVVMLight\GalaSoft.MvvmLight\GalaSoft.MvvmLight.STD10\obj\Release\netstandard1.0\GalaSoft.MvvmLight.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ