polmxhat
Static task
static1
Behavioral task
behavioral1
Sample
0341e818ddf3d815852029f946b4d184.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0341e818ddf3d815852029f946b4d184.dll
Resource
win10v2004-20231222-en
General
-
Target
0341e818ddf3d815852029f946b4d184
-
Size
64KB
-
MD5
0341e818ddf3d815852029f946b4d184
-
SHA1
b12eadf0481bb7736e9bd5cf4cdde31bc03a8364
-
SHA256
bf1bc0e83590998f2ac0925be6641a4956d5b2a0bf6029a2494b91f4a30d12e5
-
SHA512
9494412ea9f07de92552d9a4255d50036797414b060276bfdbb270511d81f605712176c662a4ed953e1600d4506adc929b7efa8c73b64890a8a7b5c903bc97f8
-
SSDEEP
768:mkrpisvuzgdwMG9hl7c1McuEcnr99AONlxnp38pBRCwBqcqZkw5:jrplSbm1a3AOlpMpCkqrZkM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0341e818ddf3d815852029f946b4d184
Files
-
0341e818ddf3d815852029f946b4d184.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 712B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ