SensNotifyNetconEvent
SensNotifyRasEvent
SensNotifyWinlogonEvent
ServiceMain
SvchostPushServiceGlobals
Static task
static1
1 signatures
General
-
Target
sens32.dll
-
Size
71KB
-
MD5
b2609521fff86496e7981064e306d8fb
-
SHA1
2f6f360dda6ae59550052c894148ddbd59a2f778
-
SHA256
398323a8ef24b53b70270b673f93fb23a811a3bb273e501a05585120d00c4434
-
SHA512
dc963eee7cbc0dc4fdc4803aac20fa78d13a4cadb3eacad17f200a553129756565db2a04a3b852c1921410439ccdfc351507f79df61603fd55002e1479a954b2
-
SSDEEP
1536:GJsntKIoheCGwPF5oOUEPwXAaPCPsll7uSVKKKK:QstoheSPFitPCs3CS
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource sens32.dll
Files
-
sens32.dll.dll windows:5 windows x86 arch:x86
dcaedc30045ef0be1a92c2961e13e55b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateFileA
GetFileSize
SetFilePointer
CloseHandle
ReadFile
GetLocalTime
GetModuleFileNameA
CreateThread
Sleep
FindClose
CreateMutexA
GetLastError
ReleaseMutex
GetSystemDirectoryA
GetWindowsDirectoryA
DeleteFileA
CopyFileA
ExitProcess
FindFirstFileA
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
VirtualAlloc
WaitForSingleObject
VirtualFree
CreateFileW
WriteConsoleW
HeapReAlloc
HeapFree
HeapAlloc
GetCurrentThreadId
DecodePointer
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
HeapCreate
HeapDestroy
RaiseException
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
WriteFile
GetStdHandle
GetModuleFileNameW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
HeapSize
LCMapStringW
MultiByteToWideChar
GetStringTypeW
GetConsoleCP
GetConsoleMode
LoadLibraryW
RtlUnwind
IsProcessorFeaturePresent
SetStdHandle
FlushFileBuffers
advapi32
SetServiceStatus
DeleteService
ControlService
CloseServiceHandle
OpenServiceA
OpenSCManagerA
RegisterServiceCtrlHandlerA
shell32
SHGetSpecialFolderPathA
Exports
Exports
Sections
.text Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.psrvc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ