PyInit_bytesource
Behavioral task
behavioral1
Sample
ea78749b3c035eb62bd3874dcd925817be98fc2f000dbe1146f6a8a1da2dfe36.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ea78749b3c035eb62bd3874dcd925817be98fc2f000dbe1146f6a8a1da2dfe36.dll
Resource
win10v2004-20230915-en
General
-
Target
ea78749b3c035eb62bd3874dcd925817be98fc2f000dbe1146f6a8a1da2dfe36
-
Size
17KB
-
MD5
f2fd89a4121069501ddbd0d54aa7eefa
-
SHA1
9f8855fb320c64ebd76263c64fdc123b29c46ff2
-
SHA256
ea78749b3c035eb62bd3874dcd925817be98fc2f000dbe1146f6a8a1da2dfe36
-
SHA512
3a52deb593b3a77ed74718be0ea43a9e18567e919224e4694244642f64ed60bbf204ab8b72a83a57f01061d042ed99d34ebec79c7f09c5569568eec71ad0da76
-
SSDEEP
384:4X3bmexgEel7TnB6nNLw98dUGXpSpWrvJdS8I4Za7gJXe0:4n/0BroNOCDjPpO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea78749b3c035eb62bd3874dcd925817be98fc2f000dbe1146f6a8a1da2dfe36
Files
-
ea78749b3c035eb62bd3874dcd925817be98fc2f000dbe1146f6a8a1da2dfe36.dll windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE