Spire[.]Pdf[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Spire.Pdf.dll
Size

10.4MB
MD5

7b13e07d73062eb35f8863770845040f
SHA1

c845e41012c05aa88c2b50f3752ef39c7d03c7ed
SHA256

7fe3224feb40baab3633a7c7b47c3689373a3bcbf55cd35e9e6cd5ddd50d176c
SHA512

ce0727ed1f840d185fdfefe1916986181ae5f6c182b7555d457aaa389eadd244dd0e9ca5e3fa3a6fb77a3e6f5882b023f8f2441fd4ffbdad34140778bd632b6e
SSDEEP

49152:DPZLy351ocEcoZKhG5kwUHZ1mjqyeOybh+rl9Hy7SegjOlFAC/KI+uODiNYLw6Km:DPZutHwgLmTT87sKlxawmKLPeTit3sY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Spire.Pdf.dll

Files

Spire.Pdf.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 10.4MB - Virtual size: 10.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ