Static task
static1
Behavioral task
behavioral1
Sample
ApiModels.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ApiModels.dll
Resource
win10v2004-20231215-en
General
-
Target
ApiModels.dll.5
-
Size
4KB
-
MD5
e29ac7ae7fec7245adad789ec976dc82
-
SHA1
485ebd77ad96c12f8b6569ab0ddd66a827b13825
-
SHA256
8396b5a080a15adce0b286869b32f4c8a1e6fa5711603fd54da951a2804de60d
-
SHA512
66dc5b48f207ecba31f99669693f0d605e22300adef33f7934f6f5220a1188083af821e6ee027f093d14dced17215d38bdd2772aec62ff103759b9000ecc7c3f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ApiModels.dll.5
Files
-
ApiModels.dll.5.dll windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 796B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ