s_activate
s_filestream
s_get_expiry
s_get_level
s_get_response
s_get_username
s_init
s_log
s_login
s_registr
s_token
s_var
Static task
static1
1 signatures
General
-
Target
Sentinal.dll
-
Size
3.2MB
-
MD5
4a84f1cec948d3629aad16983c222d02
-
SHA1
03800d2186b7aaeb6ce31a9c10f5eb1edc084acc
-
SHA256
7c4a66833f0d47967bc2a1fd8b0f37b27d6d10d8bb5d94bc5dadcaf2a51bfc00
-
SHA512
41aab6d318db34509cb88c073191c5e798463e3364de8de89592d4c4be204223252d2d9e4711a10aae5bb8a97225a4d767d2d7f4e38c1e88399877ab762afd7e
-
SSDEEP
98304:O4t5eMHoIVfR6gpeC1Hrd7ugDIkGon3Cn50xLny:OcAbiXNHJSo3C54
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Sentinal.dll
Files
-
Sentinal.dll.dll windows:6 windows x64 arch:x64
2738b788ebe4c1aad190199fa2cafa58
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
ws2_32
send
wldap32
ord50
crypt32
CertFreeCertificateChainEngine
advapi32
CryptHashData
RegQueryValueA
kernel32
WriteFile
GetModuleHandleA
user32
MessageBoxW
PeekMessageA
shell32
ShellExecuteA
PathMakeUniqueName
shlwapi
ord215
userenv
UnloadUserProfile
rpcrt4
UuidToStringA
bcrypt
BCryptGenRandom
imagehlp
ImageNtHeader
wintrust
WinVerifyTrust
Exports
Exports
Sections
.text Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 772KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE