WSPStartup
Static task
static1
Behavioral task
behavioral1
Sample
071388136019faa7915800a030f66c2b.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
071388136019faa7915800a030f66c2b.dll
Resource
win10v2004-20231215-en
General
-
Target
071388136019faa7915800a030f66c2b
-
Size
92KB
-
MD5
071388136019faa7915800a030f66c2b
-
SHA1
46e2b895ca15cd76fb8ccd418e233d0f7c1b8024
-
SHA256
178da1891cd9def8d1d342b0522dbbbdb5578fc341cb1f43842ac6a481e888d1
-
SHA512
b39dfda980e8160cf2767b829975d00edc7e88730674ad29d2c39c85cf6ab14ea4b8d0a483054fe27cc2fbe97d694a148a9ec47d96b2c56406ee07c910c897db
-
SSDEEP
1536:5J6V5l9S8cY4W8FsZoCkpEBcIO1pz81gwS3NkrMh69ndemVY5GqEec/Z/:qVr9vnRaHLIC81rS96AMYsqER/d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 071388136019faa7915800a030f66c2b
Files
-
071388136019faa7915800a030f66c2b.dll windows:4 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Exports
Exports
Sections
.text Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
czb5fu17 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
w3ut6pvb Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
79e20evv Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7gzn7pdf Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yn1suolo Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
l1taida2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ