WSPStartup
Static task
static1
Behavioral task
behavioral1
Sample
2d1acea75f7f8ded898221a1b40c63afc6ee411044999b71b749f3ba54b5bb51.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2d1acea75f7f8ded898221a1b40c63afc6ee411044999b71b749f3ba54b5bb51.dll
Resource
win10v2004-20220901-en
General
-
Target
2d1acea75f7f8ded898221a1b40c63afc6ee411044999b71b749f3ba54b5bb51
-
Size
5KB
-
MD5
6ce5e16b9a27bbd803ca4a6944a818f0
-
SHA1
0950e89d1b7f0a975e95f6904b6d20f66e7642e8
-
SHA256
2d1acea75f7f8ded898221a1b40c63afc6ee411044999b71b749f3ba54b5bb51
-
SHA512
ab4959cdc1d0baf0d5a66d9d15d83b7684c15c124b3bd306a0a86877b7f48ecb951b77cbcc1758390f6e88a9d951653ccb00e718bcb94def6f869445b6b016cc
-
SSDEEP
48:aENvCMcmOpFlsxc/Paeiin4e3Dtg/YVNdvDAnNVoCTFXulOd5D5XT3:7smtq3aO73xukNhDAnNVpRzV3
Malware Config
Signatures
Files
-
2d1acea75f7f8ded898221a1b40c63afc6ee411044999b71b749f3ba54b5bb51.dll windows x86
0182f03d2a41f113eab68a51b2eb5904
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
GlobalFree
GetProcAddress
LoadLibraryW
ExpandEnvironmentStringsW
lstrcpyA
lstrlenA
GetFileAttributesA
LoadLibraryA
CloseHandle
ReleaseMutex
GetModuleFileNameA
user32
wsprintfA
msvcrt
_stricmp
memcpy
strlen
strrchr
strcpy
memset
ws2_32
WSCEnumProtocols
WSCGetProviderPath
Exports
Exports
Sections
.bss Size: - Virtual size: 65KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 834B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ