Static task
static1
Behavioral task
behavioral1
Sample
ShockwaveFlashObjects.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ShockwaveFlashObjects.dll
Resource
win10v2004-20240426-en
General
-
Target
ShockwaveFlashObjects.dll
-
Size
32KB
-
MD5
b0a2f972ab6618dfefd91aa3618ebeaf
-
SHA1
5645364abf1be768be04fd575965b1e668857cfa
-
SHA256
ec1ebd9c4de98a0f502d0448418bebf5a4b2d8772157a8b19c1fd0c9937482e5
-
SHA512
18c60d82eeaf51bd716c17add83359173a7ade668da63bad46e28fea34126f4b62a0afb35cb09fe1f83f81d3784a32b9bbbf3dd1e2d6401ab2e32237c21dda1a
-
SSDEEP
384:Ewpxenqb1P6bd6yRSxKvCr2k5Whn3LphZx:Onk18ZRSxKKCbx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ShockwaveFlashObjects.dll
Files
-
ShockwaveFlashObjects.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ