mynsp[.]dll | Triage

Sharing

General

Target

mynsp.dll
Size

20KB
MD5

f8084ed1dc34852c32d06856784dce4d
SHA1

240055aa125bd31bf5ba23d6c30133c5121147a5
SHA256

fa8e6f0094e9adcad61b80c75726bf6c7624c2b10a531f9c0f8a6ffb49b950ba
SHA512

038eb5c5228a2d7f260f3741e1cae956eaf67501d814c5d67efa60caa708dca1fa5beb5c6721e3f8d276bb3e0981a127b4aff778af4fc730998660d6dd2362f3
SSDEEP

48:qh1GDnZVo2l22E62l2/vjvjC6Dfl7d+TzQihvUgQtAfGhiZ0TVcB:AwTZCLL6L/vjvjC6rl7wTMi0oGhiaJc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
mynsp.dll

Files

mynsp.dll
.dll windows:4 windows x86 arch:x86

2348574edeab6e9181daf56e7e9610e1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
CreateDirectoryA
SetLastError
GetModuleFileNameW

shell32

SHGetSpecialFolderPathA

msvcrt

wcsstr
_wcslwr
free
_initterm
malloc
_adjust_fdiv

Exports

Exports

NSPCleanup
NSPStartup

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 620B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ