uires[.]dll[.]VIR

Sharing

Copy URL Twitter E-mail

General

Target

uires.dll.VIR
Size

11.2MB
MD5

72759c77ca4b837fdc3927372b300f56
SHA1

be3bebab8db0087d92316b5f54b5aaf5f51fbf46
SHA256

0283eebeda2c6554a39d77ab8b1507a1d6393e5a04f7a4de0d2ed9ab5c63f648
SHA512

20781990e9a5f6d5c96ff66d5bd2fd115c50747037f483cf9dfb071220e1579a5610a62d3d2f90d3ee3e8ce610c0827fade4ebf4414722452c2d4d8097a3f7ff
SSDEEP

98304:n388888888888888888888XS888888888888hCaeo4cRE7QvY2muJFqUte:nfmeTx7QvY2mwe

Score

1^/10

Malware Config

Signatures

Files

uires.dll.VIR
.dll windows:6 windows x86 arch:x86

Code Sign

2b:70:75:a7:50:5d:97:82:4e:f3:d4:aa:68:28:aa:3f
Certificate

Issuer

CN=TestCert_2019-4-20_14-38-28

Not Before

20/04/2019, 11:28

Not After

20/04/2020, 11:48

Subject

CN=TestCert_2019-4-20_14-38-28

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0b:64:d8:e6:ce:c3:f6:b8:28:77:cd:7f:c4:df:ed:9c:c5:ca:90:f8:34:1d:f2:55:80:0a:fb:0f:be:4d:4c:49
Signer

Actual PE Digest

0b:64:d8:e6:ce:c3:f6:b8:28:77:cd:7f:c4:df:ed:9c:c5:ca:90:f8:34:1d:f2:55:80:0a:fb:0f:be:4d:4c:49

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\JobRelease\win\Release\bin\x86\uires.pdb

Sections

.rdata
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11.2MB - Virtual size: 11.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

2b:70:75:a7:50:5d:97:82:4e:f3:d4:aa:68:28:aa:3fCertificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

0b:64:d8:e6:ce:c3:f6:b8:28:77:cd:7f:c4:df:ed:9c:c5:ca:90:f8:34:1d:f2:55:80:0a:fb:0f:be:4d:4c:49Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.rdata Size: 512B - Virtual size: 284B

.rsrc Size: 11.2MB - Virtual size: 11.2MB

2b:70:75:a7:50:5d:97:82:4e:f3:d4:aa:68:28:aa:3f
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

0b:64:d8:e6:ce:c3:f6:b8:28:77:cd:7f:c4:df:ed:9c:c5:ca:90:f8:34:1d:f2:55:80:0a:fb:0f:be:4d:4c:49
Signer

.rdata
Size: 512B - Virtual size: 284B

.rsrc
Size: 11.2MB - Virtual size: 11.2MB