Static task
static1
Behavioral task
behavioral1
Sample
nwl415x2fc-cleaned.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
nwl415x2fc-cleaned.dll
Resource
win10v2004-20231020-en
General
-
Target
nwl415x2fc-cleaned.dll
-
Size
260KB
-
MD5
7946926dd10e953e5056515a20954a73
-
SHA1
6090eec59234bd0237abef6b222329b7739b2e43
-
SHA256
71af3b1eb3b6593a5c01b0582c07a8ba6d92a780d1c0b9ef02bea1ad008d98ee
-
SHA512
823c2f6c7d0ab55dc72c70feee9776c0a1cac60d74aaa12e13fc173ba58847ae8439af76dfd2a9ddbadd2091ad658200ce36a119d4ae1ae5124e1e435ff3a912
-
SSDEEP
3072:0TBncFWn1GG7bnDOlQGJ1axJO3d0NBMFh3wXrnWm6ObcgOXyMZbv4uEnk0ZOuK9V:0TpGG7jtO3dmuhAXr9bLOXXZbgp1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource nwl415x2fc-cleaned.dll
Files
-
nwl415x2fc-cleaned.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 258KB - Virtual size: 257KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ