Static task
static1
General
-
Target
splwow64.exe
-
Size
89KB
-
MD5
a46e3a000ca82c5d2a7e6058f8a04a6c
-
SHA1
884591c7815b7db86a171188acb9b62631636e06
-
SHA256
c4b37931430ff96bbfe77cc77658e6d4f552930d5f7d16ae376e2332d2d42734
-
SHA512
3dd2236c21a77e2c0a6477a5281fdb3192272760efdc037f0c4f4c28981e1fe9630c0dae5de803d00a8eaee7ef367023cba638faf104735d7ec3bd590da8d8c1
-
SSDEEP
1536:LhpbXXqwJcvVto3dS9uPsCerVt3A7HPd4n+lbeRZIbSQPYZ:LhpjqwOVtwdS9uPs3HQbPRyZ2pPYZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource splwow64.exe
Files
-
splwow64.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ