Static task
static1
Behavioral task
behavioral1
Sample
KernelBase.dll
Resource
win10-20240214-en
General
-
Target
KernelBase.dll.mui
-
Size
1.2MB
-
MD5
7baffdb5e79cc8a1bae01186947b6e53
-
SHA1
031c8278445e5b924c6c9080a9bf4f94d41222f7
-
SHA256
5765d5bbf9fd3240b86076ab50184dd5019d1bfee9d7bba1d12c18081d4a3714
-
SHA512
7b6cac1ea3ef57d37f0b15d7831a366bd9e627727ebaed3ce0d2abc3c2576def80e6d663527151d92ee49a0b3a39d788d2827c45b063385750edf7ee91674638
-
SSDEEP
6144:5/Jz3YFb5A3sH3j8cZr1NabMa89HPdP8SZUyZHSBiq8Qd63RjdAubzAuAOBURYts:lJzIbG3sH3jBJ8Mb9CeUyJ28Zx458hvc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource KernelBase.dll.mui
Files
-
KernelBase.dll.mui.dll windows:10 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.rdata Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ