Static task
static1
Behavioral task
behavioral1
Sample
ORIENTATION_V1.dll
Resource
win11-20231128-en
General
-
Target
ORIENTATION_V1.dll
-
Size
4KB
-
MD5
a5e48821e220c9c568ad3d358a40678a
-
SHA1
9fa88324f131d084269e21341a08d9897749c312
-
SHA256
981a279886bc70badfb113fab8256de76621fe3c7b9c53568257a95a1b5ee39d
-
SHA512
d168da3da387c2bf86d5222e15c7dd78782adb0a58ecd8f2165a112318afc73a57428bb3fb28aee8443d5232fed3fc8e5eaa124f9d26b616ef65d01ce535af28
-
SSDEEP
48:6l+lH8TiqNS3dluKYffTcHv+/9W6YfNHClfwr4sKlTGG8ClnJplkO6DfL:LMNS3dlEnhYfBr4pD7HiO6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ORIENTATION_V1.dll
Files
-
ORIENTATION_V1.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ