WSPStartup
Static task
static1
Behavioral task
behavioral1
Sample
76cad0fdc980f8626444ea0f7c7e67eb.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
76cad0fdc980f8626444ea0f7c7e67eb.dll
Resource
win10v2004-20231222-en
General
-
Target
76cad0fdc980f8626444ea0f7c7e67eb
-
Size
40KB
-
MD5
76cad0fdc980f8626444ea0f7c7e67eb
-
SHA1
35c12e3fc3036e5a67cac04e3475d936e7c80854
-
SHA256
cf399081a27e96e75ba340eb937d919a55ab3f96f36a5c475994ddbc22e360f2
-
SHA512
df4c06200c5bf6acc21561c60afca5f2a2409c3c2d1c53e3bfb1f38459fa4709f3efb274508ca831e5bb2eb509d4f9ba53d384d1140f686734efd45be62aa8fc
-
SSDEEP
768:NmXP98cYTGLzL2pQIV/q7qSiL12I99VIoJ4uW:Nmf98coGiaSq7WL8HoJ1W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76cad0fdc980f8626444ea0f7c7e67eb
Files
-
76cad0fdc980f8626444ea0f7c7e67eb.dll windows:4 windows x86 arch:x86
d138b4428074a69c52cd454d3426b9ae
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
VirtualAlloc
VirtualFree
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jdpack Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE