WSPStartup
Static task
static1
Behavioral task
behavioral1
Sample
658a8fafdd9586e5a18717eccad5eb78.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
658a8fafdd9586e5a18717eccad5eb78.dll
Resource
win10v2004-20231215-en
General
-
Target
658a8fafdd9586e5a18717eccad5eb78
-
Size
43KB
-
MD5
658a8fafdd9586e5a18717eccad5eb78
-
SHA1
7798185b9afed779b389ac3354714bcc9c3886d5
-
SHA256
e058591689a9e2f62d25f375c3e38d9e10b720f67fded8a43d16632406e09467
-
SHA512
4c16c4247fcc34fb2417e19eb00a25b321c14d8775fa0a909415e98ee069e05cbf1ba24434fdf7140f31ccc273b8aa166e8fced20572045c17c2db84bf025f50
-
SSDEEP
768:+2AleuSzC6+Hg3JYQ4Jj0XbTMqNm9DAFp5RCYvgKqb7bt1S6mDrwnpDACvfw:+2JC8+vJj0Xtm9DAv5RCyq7tsn2K4w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 658a8fafdd9586e5a18717eccad5eb78
Files
-
658a8fafdd9586e5a18717eccad5eb78.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
TELOCK0 Size: - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TELOCK1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TELOCK2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE