ProteinDLL_Hibernate
Static task
static1
General
-
Target
Protein.3.10.dll
-
Size
3KB
-
MD5
8351618854fa289e55cfeebbcdc2b915
-
SHA1
3f92a608d8d76d2f9caf8d8b3337b3f16bd0793b
-
SHA256
fde1d66c472aed4879650b5f05781d42d5eb3958ae98c8c25a0c9bcb8a820430
-
SHA512
27629ebfe132d0b1a1e44b64ccb69018d67dbe878225717768689542520991ed57df9ecf807e71f60d64bcf9fb8aa76c98077cb4ea9c409486b7f0a9fb64ad66
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Protein.3.10.dll
Files
-
Protein.3.10.dll.dll windows:6 windows x86 arch:x86
7b3faf2fc1aa544a49b368ac163ea8c3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
RegCloseKey
Exports
Exports
Sections
.MPRESS1 Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1024B - Virtual size: 955B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE