AppVIsvSubsystems32[.]dll

General

Target
AppVIsvSubsystems32.dll
Size 120.3MB
Sample260730-ppekwaxfpf
SHA256 eb20fb4e1de2844717270e600af05abac06b359be711eabf14a3d91bfbf966e6
MD5 29a7db21129e247be97bd34c62cb801d
SHA1 7e9f30253cbffee6d9ca40ab1d4b8270cf555354
SHA512 4dfec3eeb34be82995d2e42dbedc61cd3254fb70fadfb09c6e57c1f1c5e4345adc0e647d92eaa0d7280fce216c65e735aad2a4fff98c77468dd449cffd85d9f4
SSDEEP 1572864:wIMWAOW3WI6fzN5jpD0pVOZxGexJfSLkC8hy4UVolMazeSYSzSWfkn48fWrT/tX4:wh3cjD0pCXhy4UVoGaz1hSWfk48fOjV4
TLSH
T1645833CA72269C02DBAB34B1252ECCF7C10377F9964AE4D273C71A1E25372E9195AF41
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AppVIsvSubsystems32.dll

File Explorer

AppVIsvSubsystems32.dll

.dll 120.3MB

AppVIsvSubsystems32.dll

IMPHASH f343a945af36bbbde8fca183a501ed1c
SHA256 eb20fb4e1de2844717270e600af05abac06b359be711eabf14a3d91bfbf966e6
MD5 29a7db21129e247be97bd34c62cb801d
SHA1 7e9f30253cbffee6d9ca40ab1d4b8270cf555354
SHA512 4dfec3eeb34be82995d2e42dbedc61cd3254fb70fadfb09c6e57c1f1c5e4345adc0e647d92eaa0d7280fce216c65e735aad2a4fff98c77468dd449cffd85d9f4
SSDEEP 1572864:wIMWAOW3WI6fzN5jpD0pVOZxGexJfSLkC8hy4UVolMazeSYSzSWfkn48fWrT/tX4:wh3cjD0pCXhy4UVoGaz1hSWfk48fOjV4
TLSH
T1645833CA72269C02DBAB34B1252ECCF7C10377F9964AE4D273C71A1E25372E9195AF41
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

155080

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

196KB

Virtual Size

196KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

83KB

Virtual Size

82KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

AppVIsvSubsystems32.dll

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

AppVIsvSubsystems32.dll

kernel32

generic