Static task
static1
Behavioral task
behavioral1
Sample
NlsLexicons0049.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
NlsLexicons0049.dll
Resource
win10v2004-20240508-en
General
-
Target
NlsLexicons0049.dll
-
Size
1.5MB
-
MD5
5d038c4b5cd3de76646d815e8f610947
-
SHA1
b46fa898a4bd2d5e58486e27f3302ef80d66da4f
-
SHA256
a85446081e2fe508969cf89b7894504de47b92ea0d472539fc55cabc4e2cd36b
-
SHA512
24618db795abdca6ea959c063ff2e7b1c21aa29ce113ec3e48bc4d0d428db03aa86c31582e4b26c795e1c9b57ea3a4d476afae8fabf9a44c07845ab132694a6c
-
SSDEEP
24576:VUOWUeb/N2MMMMMMMRIH1SLFVvflpN3lYxrD/DDD2VrUKA56p8EUAvaN+3:VNO/yH1SfXlpN3CxrD/DDD2VrUpAQ+3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NlsLexicons0049.dll
Files
-
NlsLexicons0049.dll.dll windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.rsrc Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ