Winext
Static task
static1
Behavioral task
behavioral1
Sample
22ea537e67605da9d34bf3faeaee97aa.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
22ea537e67605da9d34bf3faeaee97aa.dll
Resource
win10v2004-20231215-en
General
-
Target
22ea537e67605da9d34bf3faeaee97aa
-
Size
3KB
-
MD5
22ea537e67605da9d34bf3faeaee97aa
-
SHA1
bbcb9b8b02a436c407ec99239325e508de9612da
-
SHA256
33f6553ead0940a788623d2db252fd7a5d8f6140d55ffd0e5221a2d50a6df874
-
SHA512
697ce35c807674245cae0d5976dc1e20403ff04ff51f8700337193d0c97a6a0ca0c8d2fb36501052f5332e40393a9fb00e63840c91612fbd17fa73811a2cf7ad
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22ea537e67605da9d34bf3faeaee97aa
Files
-
22ea537e67605da9d34bf3faeaee97aa.dll windows:4 windows x86 arch:x86
b2661874815109fd44302b8eca28bbb9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
WinExec
user32
MessageBoxA
Exports
Exports
Sections
.text Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 213B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 46B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ