VscMgrPS.pdb
Static task
static1
Behavioral task
behavioral1
Sample
VscMgrPS.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
VscMgrPS.dll
Resource
win10v2004-20240426-en
General
-
Target
VscMgrPS.dll
-
Size
12KB
-
MD5
c8ebb598f65e6841d704fe8173f660c9
-
SHA1
a8bb0c194ee9c950b5e1f0942ec1c265975200eb
-
SHA256
5a765c66be68fdde9170d7d88671bb9194683460b5a1a416694a5b7d948bad0e
-
SHA512
a568c3ef8a788c28a7016e41b912d9994a3039394aa7a293987e1ebdb9c27eab9d160352aab63aa64147c405b6481df19d1304524e4c08e1adab59444621b291
-
SSDEEP
192:9vzdWbNjgaaVtYVTd/SAjoyRGMZF1ZQpqOWsPPUqg3MWO:9L4maaXYJLoybZwlWsPPLg3MWO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VscMgrPS.dll
Files
-
VscMgrPS.dll.dll regsvr32 windows:6 windows x86 arch:x86
5d524186c8150bf26324d99612b45652
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
memcmp
_except_handler4_common
_initterm
malloc
free
_amsg_exit
_XcptFilter
kernel32
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
Sleep
DisableThreadLibraryCalls
TerminateProcess
ole32
HWND_UserSize
HWND_UserFree
HWND_UserMarshal
ObjectStublessClient5
ObjectStublessClient3
ObjectStublessClient4
HWND_UserUnmarshal
rpcrt4
NdrOleAllocate
CStdStubBuffer_CountRefs
IUnknown_Release_Proxy
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_QueryInterface
IUnknown_AddRef_Proxy
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_Disconnect
CStdStubBuffer_IsIIDSupported
NdrOleFree
CStdStubBuffer_Invoke
NdrDllUnregisterProxy
NdrDllGetClassObject
IUnknown_QueryInterface_Proxy
NdrDllCanUnloadNow
NdrDllRegisterProxy
NdrCStdStubBuffer_Release
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 285B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ