WSPStartup
Behavioral task
behavioral1
Sample
0183060f22018f93d9cf3bfae96461be70ee3d5be79b23cbfce3caf6f71db726.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0183060f22018f93d9cf3bfae96461be70ee3d5be79b23cbfce3caf6f71db726.dll
Resource
win10v2004-20220812-en
General
-
Target
0183060f22018f93d9cf3bfae96461be70ee3d5be79b23cbfce3caf6f71db726
-
Size
658KB
-
MD5
413213865af185e62a9ca0251e379360
-
SHA1
9b9f26d76abad3487ee9527f62a076490cca7733
-
SHA256
0183060f22018f93d9cf3bfae96461be70ee3d5be79b23cbfce3caf6f71db726
-
SHA512
4dd0666a6e7d899013de999fa9eee0b9f362004d9a7fcd5b0ae980db19e5b039c04b52b308d7285bf1882161c98e3c66eba2dc09b8ab57271d5a27482a10bf62
-
SSDEEP
12288:Ns0r1argHT39831OEASIQuW7tLMba7Dgy2f/UBV9J+PFRLkIE8:XRJHTKhA+uW75MbHydf+PrLkV8
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
0183060f22018f93d9cf3bfae96461be70ee3d5be79b23cbfce3caf6f71db726.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
UPX0 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 404KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE