WSPStartup
Static task
static1
Behavioral task
behavioral1
Sample
f6ecdc1bd4ead39fe0dc6e1f960647a64a17df4a29b05b92291dbf1a3f1bb0ae.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f6ecdc1bd4ead39fe0dc6e1f960647a64a17df4a29b05b92291dbf1a3f1bb0ae.dll
Resource
win10v2004-20220901-en
General
-
Target
f6ecdc1bd4ead39fe0dc6e1f960647a64a17df4a29b05b92291dbf1a3f1bb0ae
-
Size
20KB
-
MD5
1ce86f73949aa086fa5b0a2c6a52933e
-
SHA1
1b29729539fc1ec54e22231d147dc3bd687ef794
-
SHA256
f6ecdc1bd4ead39fe0dc6e1f960647a64a17df4a29b05b92291dbf1a3f1bb0ae
-
SHA512
0c3412b7976d5c8fd1bc2810376b71264520a09bb29d3bb414695daae0332e40c21cdb74abb74359be6958eeaf32898da671934673b4f7ab14d55d78276ee99e
-
SSDEEP
96:t32wTStQXI2upUzgV1WcuDKKKWvCaGyw5L9C3:CQXI2IUcVAcuKaG1JA
Malware Config
Signatures
Files
-
f6ecdc1bd4ead39fe0dc6e1f960647a64a17df4a29b05b92291dbf1a3f1bb0ae.dll windows x86
6e47d7c5573c9bc5939e6510107968c4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_onexit
free
_initterm
malloc
strstr
_adjust_fdiv
__dllonexit
_itoa
_stricmp
kernel32
LoadLibraryW
WritePrivateProfileStringA
GlobalFree
GlobalAlloc
ExpandEnvironmentStringsW
GetProcAddress
GetModuleHandleW
OutputDebugStringA
LoadLibraryA
GetPrivateProfileStringA
DisableThreadLibraryCalls
GetModuleFileNameA
msvcp60
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
ws2_32
WSCGetProviderPath
WSCEnumProtocols
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1013B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 476B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 228B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ