PyInit__cd_fast
Behavioral task
behavioral1
Sample
d1f4424f4881a095bda356f461cc5ba60ba65803a8f7577abf9a1e3927e75dd1.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
d1f4424f4881a095bda356f461cc5ba60ba65803a8f7577abf9a1e3927e75dd1.dll
Resource
win10v2004-20230915-en
General
-
Target
d1f4424f4881a095bda356f461cc5ba60ba65803a8f7577abf9a1e3927e75dd1
-
Size
101KB
-
MD5
44555f48612bd4f616e1d57c70616acd
-
SHA1
ab8c62825c8c66d3b8f8d8c0bbe7e6827578cc8b
-
SHA256
d1f4424f4881a095bda356f461cc5ba60ba65803a8f7577abf9a1e3927e75dd1
-
SHA512
6dff0f9c43148e558c40eb633388875cb4f6789b35842efb776107ed5195b87165b9d8bfff144eab17c1bcfddb11377b33ac595b8af112f99014eaf2b1b126d3
-
SSDEEP
3072:p51W3XnPBcbz36dNi56aIrgr2cIg4u2jhY:oPmbzn6aI0/IhO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1f4424f4881a095bda356f461cc5ba60ba65803a8f7577abf9a1e3927e75dd1
Files
-
d1f4424f4881a095bda356f461cc5ba60ba65803a8f7577abf9a1e3927e75dd1.dll windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 244KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE