Static task
static1
Behavioral task
behavioral1
Sample
auditpolmsg.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
auditpolmsg.dll
Resource
win10v2004-20240508-en
General
-
Target
auditpolmsg.dll
-
Size
93KB
-
MD5
28f53390a15648ffd403cc4c65a90b27
-
SHA1
767db66eb9a22be938ac715278c2fa9939113919
-
SHA256
f628f9051a9dc767efdad55d3461f879f23be8de86a3ce12be93388ebc02d070
-
SHA512
f92de5835086af268f573a48aa74e222d573e03a04f4711125ca7cd719ac686e2269afacc648063677c3f1eda63cb0c6e64933e0a9e8f88faed4fcdea12f65ab
-
SSDEEP
1536:gV9sSnIh8Pxvp1Jz1mEmzJ0RtW9yBozETuEGeJvO41ZZnr26:gV9d7PxB3m10RgFz/4vB1Tn1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource auditpolmsg.dll
Files
-
auditpolmsg.dll.dll windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ