Spire[.]Doc - 副本[.]dll | Triage

Sharing

General

Target

Spire.Doc - 副本.dll
Size

4.4MB
MD5

2252849267c211470e3ac7dad3e239fc
SHA1

74a47704e135d96885e4556343dbef2b499831a3
SHA256

b94d674657ad5fbb2dbb347bdd8fe7bae95b333837a4e31f7a44932f0bc3119c
SHA512

a30b6adc69e7e613c8b15351fc0d576a5df0dd3768dd06a10f59a3ee9ca8477893de542ab8854b7d23551f65f73a15e23e4fa54f32b23325683f021c30aa1f32
SSDEEP

24576:C982pp/fP9IDssmQYisHgS/5qkFPuY9FvzVp4eN4lU0KPSxY6QvfxnjdFqMBHukQ:C9bfycnlPbz/xSQSR6Z48

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Spire.Doc - 副本.dll

Files

Spire.Doc - 副本.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ