wfpspo
Static task
static1
Behavioral task
behavioral1
Sample
b1d642cd19b49a4caa3cb0f603efd55783c5be70b2f1435294931b2422cefaa6.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b1d642cd19b49a4caa3cb0f603efd55783c5be70b2f1435294931b2422cefaa6.dll
Resource
win10v2004-20221111-en
General
-
Target
b1d642cd19b49a4caa3cb0f603efd55783c5be70b2f1435294931b2422cefaa6
-
Size
531KB
-
MD5
84adcb291ae56630794c2afe01c64e4e
-
SHA1
4aad6f4b63b55174d75da1230d550cab0548ab15
-
SHA256
b1d642cd19b49a4caa3cb0f603efd55783c5be70b2f1435294931b2422cefaa6
-
SHA512
9dc3e179669b7311950d7027d9843b6fd0f194313c09f1b0b659962bd76deb96254dfcd20a19280e6a65f7679184611ac3a3c90693eba01aded54564c90af300
-
SSDEEP
6144:zKyHwgfn3TSE3N/SzY0PgLmIgv0MdNRxJFgkWSBlEe:z3HDnLwY0wmIgpdnxJH/
Malware Config
Signatures
Files
-
b1d642cd19b49a4caa3cb0f603efd55783c5be70b2f1435294931b2422cefaa6.dll windows x86
5920028f88c71ad62a8a821f22175952
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
GetCurrentProcessId
GetTickCount
UnhandledExceptionFilter
CreateRemoteThread
GetModuleHandleA
GetModuleHandleW
CloseHandle
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetLastError
GetCurrentThreadId
OpenProcess
Sleep
GetProcAddress
GetSystemTimeAsFileTime
GetCurrentProcess
advapi32
AdjustTokenPrivileges
OpenProcessToken
IsValidAcl
msvcrt
exit
Exports
Exports
Sections
.text Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 441KB - Virtual size: 470KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ