Static task
static1
Behavioral task
behavioral1
Sample
Microsoft.Management.Infrastructure.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Microsoft.Management.Infrastructure.dll
Resource
win10v2004-20230220-en
General
-
Target
Microsoft.Management.Infrastructure.dll
-
Size
36KB
-
MD5
3998804194188c25df75f505ac5c531a
-
SHA1
6b15b2d779e7c46e31fcc864fc1ef326fb3d2b50
-
SHA256
cbec9a910488cadbad860c850ceae521a2a346619c5a9da579e5051e270f114c
-
SHA512
d7cd7457c753190fd1ae5386a62dffbe5907ace02227ef873f4c890f4a4e987914fb94ab1ec8318f48a76fc55cfe8e7de83b75cfcbec0bb8ff0e18d2d956abdc
-
SSDEEP
768:droEzop6gC66+666M66666+vvvvvvvvvvvvvF66666K66n6666666666ZpkLEyXD:nNLEyXCL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Microsoft.Management.Infrastructure.dll
Files
-
Microsoft.Management.Infrastructure.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ