wshtcpip.pdb
Static task
static1
Behavioral task
behavioral1
Sample
67072876f2f74c1e617a25c0cbfa71eb3f7ca1ce394b733a2bb0bad529273206.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
67072876f2f74c1e617a25c0cbfa71eb3f7ca1ce394b733a2bb0bad529273206.dll
Resource
win10v2004-20240226-en
General
-
Target
67072876f2f74c1e617a25c0cbfa71eb3f7ca1ce394b733a2bb0bad529273206.exe
-
Size
9KB
-
MD5
fe881ca38cd4068ff68075b9d3cc9c50
-
SHA1
17a059bb2a9a4e112b7567d71618f1a2ca10fd26
-
SHA256
67072876f2f74c1e617a25c0cbfa71eb3f7ca1ce394b733a2bb0bad529273206
-
SHA512
711e07f59c12ade9e908a243b495bb157e5bf1968c5d121cab4361877a5f6f70dd819a22e41a520ae435b0884e4b614224b790c5b2ab1c6c0c1399812621c2f2
-
SSDEEP
96:OlJEIb3Trq6DQIQRzIV/nkbZBO1+fHcEHNIbriwgt4CXL7EWYRDWwX:ajnQIQzIxkbZBOVEGbrc6WYRDW+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 67072876f2f74c1e617a25c0cbfa71eb3f7ca1ce394b733a2bb0bad529273206.exe
Files
-
67072876f2f74c1e617a25c0cbfa71eb3f7ca1ce394b733a2bb0bad529273206.exe.dll windows:6 windows x86 arch:x86
9a563eebe953257e29ffb2b647e75c2d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
ntdll
RtlIpv4StringToAddressExW
RtlIntegerToUnicodeString
RtlAppendUnicodeStringToString
RtlAllocateHeap
RtlIpv4AddressToStringExW
LdrDisableThreadCalloutsForDll
RtlIpv6AddressToStringExW
_wcsicmp
RtlInitUnicodeString
memmove
ws2_32
WSAGetLastError
ntohs
setsockopt
Exports
Exports
WSHAddressToString
WSHEnumProtocols
WSHGetBroadcastSockaddr
WSHGetProviderGuid
WSHGetSockaddrType
WSHGetSocketInformation
WSHGetWSAProtocolInfo
WSHGetWildcardSockaddr
WSHGetWinsockMapping
WSHIoctl
WSHJoinLeaf
WSHNotify
WSHOpenSocket
WSHOpenSocket2
WSHSetSocketInformation
WSHStringToAddress
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 108B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ