Static task
static1
Behavioral task
behavioral1
Sample
output.dll
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
output.dll
Resource
win10v2004-20220414-en
General
-
Target
output.dll
-
Size
708KB
-
MD5
8ea44de54bf7bafa547a17b31d15cb20
-
SHA1
462d831c4baf08fdc086ad8c10ca28a562663e66
-
SHA256
6f251a11fe0f3e58ef0036fef550d65c2b05f844f25ac873cfdc91fc13506232
-
SHA512
7ce718137ca045e421c14ef9d58a649b77efec1cfad90f0008183022dd00a19b50d8b51b437119037bed6083d2b70de89a715e749ba81efb4a4e0bbe47b4dac9
-
SSDEEP
12288:Fmcse7GO25JYJX7kjXaztLXxLK4av2JAYgDim:0KgJYp7TzxDa+E5
Malware Config
Extracted
jupyter
http://146.70.80.90
Signatures
-
Jupyter family
Files
-
output.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 361KB - Virtual size: 361KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 346KB - Virtual size: 345KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ