Static task
static1
Behavioral task
behavioral1
Sample
winlogon.exe.dll
Resource
macos-20240410-en
General
-
Target
winlogon.exe.mui
-
Size
25KB
-
MD5
993ea6e34026d76f63de8d5323a1ad10
-
SHA1
0cdf61f93a8adc46c1d2837d533e54b3dbdd7956
-
SHA256
70f38651f8039db873be5686cee19454b652c813fb8cf1737e3e7b7385423c78
-
SHA512
38020cfb82b949f84790c098fb36d2f9b4e0c5dcd17a96e388a29c69e4e6c7f3804a1fb76a371dd359913d099a378279fb947955f371b8f05b133305d1d2440f
-
SSDEEP
384:+lnSvTROX3EPItotB8FVXaytlf5L5x59ahPomdSE5EG2aS5Y5MX5PWovW:yc+6Agb0FiYaG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource winlogon.exe.mui
Files
-
winlogon.exe.mui.dll windows:10 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.rdata Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ