vfp9resn[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

vfp9resn.dll
Size

1.2MB
MD5

49330987a1587a5e55cf429ce04af7dc
SHA1

4c5821e74489625e86bb2b9cbb5dbd59ac8524a5
SHA256

bc9de777b309a911c76106940985922aa4cd53661cd3a3ca08f40c98e41ee27b
SHA512

15af1708a96f430766797eee09569ea29237750ff5c19e79d2fb40f52c21d2cb1a3208be000ca05c844f591bbdc2a51e6901eaec16a63e45422b9dc61520333d
SSDEEP

6144:mXYTf6RtjyWIOlcu0NFLgFz+Qk1Q/VQgnhZpppppWJAtaCMkobXIJ7vt+wc2v:2YTyHFk1AQgnhZpppppWJAta17IVv7v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
vfp9resn.dll

Files

vfp9resn.dll
.dll windows:4 windows x86 arch:x86

105a34c3b3ecaf6803be201e74c83cf4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\vfp92\obj\rwobj\VFP9RENU.pdb

Imports

user32

LoadStringA
MessageBoxA

kernel32

DisableThreadLibraryCalls

Exports

Exports

DllVersion

Sections

.text
Size: 4KB - Virtual size: 210B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 356B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ