TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
peDtNISOr
Static task
static1
Behavioral task
behavioral1
Sample
ZsWIlpsW.dll
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
ZsWIlpsW.dll
Resource
win10v2004-20230703-en
Target
ZsWIlpsW.dll
Size
5.9MB
MD5
21a1b3e23c9d647da31b974c8bfdb01f
SHA1
b3ba524d31555cca0bc0df2d277c2310a5bb0ab5
SHA256
33448acd722b1eda62865788fdc0272eb794dd7f11b9fb6c7926b97d13808f66
SHA512
0af3e2ba774aa421667a3f4b19e79c8f0312c3873136d11faea9fb1d69212a155f5a39827ba91d1feeca376fde048c20efbcfc4dec61c3cda1ed360c61cf6578
SSDEEP
98304:P+6fvMQq0BNM+TcM50KKNjtkYbCVXIqyqPBabbyJ+KGzAdMPZeSMNJ7QCvT6/tfz:PffvMQqki+YMyfNRl0XWZbOmzAgZeNf8
Checks for missing Authenticode signature.
resource |
---|
ZsWIlpsW.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
InternetCloseHandle
FlatSB_SetScrollInfo
Shell_NotifyIconW
CopyImage
GetFileVersionInfoSizeW
SafeArrayPutElement
RegSetValueExW
NetWkstaGetInfo
memcpy
WinHttpGetIEProxyConfigForCurrentUser
GetVersion
GetVersionExW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
gethostbyaddr
CreateBindCtx
Arc
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
peDtNISOr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ