Overview

overview

10

Static

static

3

vim.dll

windows10-2004-x64

10

vim.dll

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    vim.dll
  • Size 1.5MB
  • Sample240926-cwne5svepc
  • SHA256 e194627c6eab59f38a73e97054a78f8859c5d6325bb4c04c10ea668d931adedc
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • vim.dll
    .dll 1.5MB

vim.dll

  • IMPHASH 271c8a61a1fa8deb146a1856fb1b8a91
  • SHA256 e194627c6eab59f38a73e97054a78f8859c5d6325bb4c04c10ea668d931adedc
  • MD5 SHA1 SHA512 SSDEEP
windows:6windowsx64arch:x64

  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
6
Entry point
265328
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL
PDB paths
C:\dvs\p4\build\sw\gcomp\rel\gs_04_50\src\Mjolnir\RemoteInput\rxinput\nvgamepad\_out\win7_amd64_release\rxnvgamepad.pdb