Static task
static1
Behavioral task
behavioral1
Sample
AxInterop.QlikOCXLib.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
AxInterop.QlikOCXLib.dll
Resource
win10v2004-20240426-en
General
-
Target
AxInterop.QlikOCXLib.dll
-
Size
15KB
-
MD5
7d16fa6e8136b61a3de6b97f94df1638
-
SHA1
edc5a2e02a14640ab500cf1fde4b63f36ec675bf
-
SHA256
91111658209f616d08a6a119fd138d084188abc72033849cf486f03c3ff9d782
-
SHA512
eef1611fb570dfe5d0990fdd9df8eeaa7178392e377dfcc1490b9457cf87eeb145d22912f5705061a526f65cc562bd5ad559fa5f4e214841d1ee6e5a42aa5c6a
-
SSDEEP
192:4VcYie4X2Y4GC5D7L3hHj88oc/P6+GCe8w4g2c2TYCC6qg+1ISCxJfaI+5yXwBlo:uZVZde8w4L8byJfluGwbU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource AxInterop.QlikOCXLib.dll
Files
-
AxInterop.QlikOCXLib.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 728B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ