PyInit_reformatter
Behavioral task
behavioral1
Sample
b291405dca833cfd297f7ba8ec18610546c9af1f62e8e682dcf24f89a7ff1f9b.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b291405dca833cfd297f7ba8ec18610546c9af1f62e8e682dcf24f89a7ff1f9b.dll
Resource
win10v2004-20230915-en
General
-
Target
b291405dca833cfd297f7ba8ec18610546c9af1f62e8e682dcf24f89a7ff1f9b
-
Size
22KB
-
MD5
b9e5407e9b0bfc1c6b038036171d4baf
-
SHA1
7a963faf757f2b3551ef528a95c2d5ebf26a73fd
-
SHA256
b291405dca833cfd297f7ba8ec18610546c9af1f62e8e682dcf24f89a7ff1f9b
-
SHA512
e15c19d09bfcdda9711069972ccb4e1ef41fbd21a96a3c37b899e4a66f258122f756264cf8261ddcb035aa39165ee3f78adcd6b7c52406238f326d33f06b7293
-
SSDEEP
384:tC93/PCMSk2FDbm4EOGJzcZPmtL9sOlkkI7YY73DsvUqBkdlG9QPZ+AZa7gJXCS:t+yfkMDy/OGNg49sOlkkI7B3W7BCGiRK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b291405dca833cfd297f7ba8ec18610546c9af1f62e8e682dcf24f89a7ff1f9b
Files
-
b291405dca833cfd297f7ba8ec18610546c9af1f62e8e682dcf24f89a7ff1f9b.dll windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE