Static task
static1
Behavioral task
behavioral1
Sample
winnlsres.dll
Resource
win10v2004-20240508-en
General
-
Target
winnlsres.dll
-
Size
28KB
-
MD5
2a8557ea3c9b3ee35e32111b35f8d400
-
SHA1
f971c90722e9bdd485ceb1d2a98e632e9cbd27c2
-
SHA256
cb462e52e768904b6f676451e6dad5b112b109d32c0e5a4f1aa86ffed14ade7b
-
SHA512
3400350c021b54630d8213cdbd10c15112819c934c9281282bd0cc913e19a4e425e7cacab607b6093fdd29ef974dca9858ab01a2ae5ffbf5f5264e9911a3a0d2
-
SSDEEP
384:cWYGWxo1AQ2VZOIRtE1Y0Ki1R8WC6kONNfckLdmi7gUwDfa/fUDxu7:uNQ2n/DiwWCZiVgxDfa/fUDk7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource winnlsres.dll
Files
-
winnlsres.dll.dll windows:10 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Sections
.rdata Size: 4KB - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ