Static task
static1
Behavioral task
behavioral1
Sample
auditpolmsg.dll
Resource
win10v2004-20240508-en
General
-
Target
auditpolmsg.dll
-
Size
93KB
-
MD5
aa3951f5c2554435c07fa3eb67596c14
-
SHA1
8620d0c7e32e8b0a71cc60b73f3850ac8b204b7f
-
SHA256
bd2cd7243e0a2f6e4790375cedafbdd7c4cdf43a5e9f443aa0e19851636b1303
-
SHA512
f5cdc87bddc1b03a755a96aa16aa3e18d148597648419426d6ded25f5649e6cb02b687593ebe11d053852cb7dcc0e05b6e010aa3924eed00020fa737c2d9209a
-
SSDEEP
1536:DR9sSnIh8Pxvp1Jz1mEmzJ0RtW9yBozETuEGeJvO41ZZnr26:DR9d7PxB3m10RgFz/4vB1Tn1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource auditpolmsg.dll
Files
-
auditpolmsg.dll.dll windows:10 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ