Static task
static1
Behavioral task
behavioral1
Sample
Interop.IWshRuntimeLibrary.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
Interop.IWshRuntimeLibrary.dll
Resource
win10v2004-20240508-en
General
-
Target
Interop.IWshRuntimeLibrary.dll
-
Size
48KB
-
MD5
0ea792bc8c2e3da76d5342ece8da2932
-
SHA1
e6b08e4fcf5b6018d18af67cacc9bff90e125724
-
SHA256
d2061d606f34b33667bd7ca73a98459b35ab647b218f8268185082bff5bfe1e9
-
SHA512
0bb2de97cf26e7154f6b0140716f626c6a88a588d418d5f924fd6d860957a71709407c95b02d1063f3dd3a1e75308d8e766917ffdebae57f397326ff99c67086
-
SSDEEP
768:zsDuyxtDHHHHHI3HHHHHI1HHHHHI/4sL9DkQZkXrSqdztnq2z9IkCB1QtcN9:ncj69DkFSWJq2z9ID139
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Interop.IWshRuntimeLibrary.dll
Files
-
Interop.IWshRuntimeLibrary.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ