WSPStartup
Static task
static1
Behavioral task
behavioral1
Sample
0475965140cfe26cd1fa5c952b62fab7.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0475965140cfe26cd1fa5c952b62fab7.dll
Resource
win10v2004-20231215-en
General
-
Target
0475965140cfe26cd1fa5c952b62fab7
-
Size
4KB
-
MD5
0475965140cfe26cd1fa5c952b62fab7
-
SHA1
16e71e473f6583d367e4113c95df08f579dfbbf7
-
SHA256
9c0cb4df38c4498f5067af3ad8da586c7f7b65e298dc53ac3aaa1c9b42fc3884
-
SHA512
197f60bd4288d773e597f93409e6bcd248e3d2e04b55c4c9796bbec12a6111010c3777eb3499df65d1e89315255cef7813107dc4499904fe9a6065edcfc9c8a6
-
SSDEEP
96:bXGv73K/8M2sLlfPLznB8adLG6pn1eRQkgcwQwTK+:bXGv7akBulfjzeALGo1emkgUwu+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0475965140cfe26cd1fa5c952b62fab7
Files
-
0475965140cfe26cd1fa5c952b62fab7.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE