PyInit_frame
Behavioral task
behavioral1
Sample
28883c01957d9fb4f0156347be15342e87505c140d5be82808dca2bc1021be5d.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
28883c01957d9fb4f0156347be15342e87505c140d5be82808dca2bc1021be5d.dll
Resource
win10v2004-20230915-en
General
-
Target
28883c01957d9fb4f0156347be15342e87505c140d5be82808dca2bc1021be5d
-
Size
79KB
-
MD5
955a233869c89c9af155204256054a0d
-
SHA1
21c4d6d051d5638e4727df960521f01a30c68036
-
SHA256
28883c01957d9fb4f0156347be15342e87505c140d5be82808dca2bc1021be5d
-
SHA512
1ebefc82ed13b2c5ffecdd37253f854f1bca4f23f1ec25fb858475314ced1776472433573633b148924d3bf43caf1241ba9985068943f3bb845fbef0246193af
-
SSDEEP
1536:2pFa6y9aan1HZsvlsdmurFie1ElhOq/zNSqBuo+zZIcLYhecRQ9/awUo:d6iaaTsds88iGEloQzAqBuvwhecRQ9Y
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28883c01957d9fb4f0156347be15342e87505c140d5be82808dca2bc1021be5d
Files
-
28883c01957d9fb4f0156347be15342e87505c140d5be82808dca2bc1021be5d.dll windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE