Static task
static1
Behavioral task
behavioral1
Sample
wordpad.exe.dll
Resource
win10v2004-20240412-en
General
-
Target
wordpad.exe.mui
-
Size
49KB
-
MD5
4d6b918963e1f737b2fcc94fdf66dfbd
-
SHA1
de5781344107f25cab11437af45791ffcc764af3
-
SHA256
63930eee8e4a0a43226060a8a55126f6f2809a788853da87471c51532203cb65
-
SHA512
b4d7e6760f902267851e86f267fec3a85e5dccd197735a428a6cfdbc0551335ff0ed8bf41a55f94a58a81f79738f4f1a36fdd560495a0828f1c4a592b343850b
-
SSDEEP
384:F34cgNBZu4k5ygCXyHU7oczh8kLJqYQ92yKIX+OWT00GcRWZ5WQQLE451ImV9AvN:F3QzTy07oczh8gJTQUyKI4/o6ESQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource wordpad.exe.mui
Files
-
wordpad.exe.mui.dll windows:10 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.rdata Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ