WSPStartup
Static task
static1
Behavioral task
behavioral1
Sample
458bd29f8657983f3124f8eac610a90e.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
458bd29f8657983f3124f8eac610a90e.dll
Resource
win10v2004-20231215-en
General
-
Target
458bd29f8657983f3124f8eac610a90e
-
Size
25KB
-
MD5
458bd29f8657983f3124f8eac610a90e
-
SHA1
8eccc49b4daf856804e7b6a60dc5c4e4ba243b08
-
SHA256
68b3f51fd970a333e53dc54390a01086c0ae4c48fa2d3467f581b6e318cef803
-
SHA512
c95ac1ad2e8d7014da663fd67fd3ea23f394ec31d10f540ae37c0cfd75f423d7d2f60b4450432dca5690e45f4d2006fc939d451a2592195d8af8f85717668737
-
SSDEEP
384:Y29Q1UKUXxvkVAvhdl+x49amZBkQ2VdCKEwLv9K89fEF6lxSDFjlvrxbq:5W1UZemx+x4QmZBs98w8F6lEhJvr8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 458bd29f8657983f3124f8eac610a90e
Files
-
458bd29f8657983f3124f8eac610a90e.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE