Static task
static1
General
-
Target
wsock32.dll
-
Size
48KB
-
MD5
a195155a1a31995e1eb685854acac3dc
-
SHA1
c08eb1ab55afe0bc4b69bad143c66dc0dfcc5e82
-
SHA256
17578d25126133588f0f15b18ced2958c56960695728f21e1b51df36cf928ed8
-
SHA512
3dcc1e574ce675dc5395ca65bcfa4e3261629ae80c312ba0f4be1e2a47b7d824dbe89c32a599ac3afca009648dcbbca99e9a8d7aecb1539b7fe5e682e7edb837
-
SSDEEP
768:2Ynz4mMGhpu/TfAfSSwSnXA86qj0ATfk1q8MRUI:znAOpuTTSnXAzAK8RUI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource wsock32.dll
Files
-
wsock32.dll.dll windows:5 windows x86 arch:x86
bb56ee11df6d76ddb9bd7fd52e00f3c4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ws2_32
WSAEnumProtocolsA
WSAStartup
WSARecvFrom
setsockopt
bind
getsockopt
WSASocketA
WSASendTo
kernel32
GetTickCount
HeapSize
LCMapStringW
LCMapStringA
GetStringTypeW
GetModuleFileNameA
GetCurrentThreadId
GetCommandLineA
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
HeapFree
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
WriteFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ