PyInit_util
Behavioral task
behavioral1
Sample
ace6f231fd1cfae20ad9cff64e0e59cd610ed6888f5ec79acf7e2469aaef4397.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ace6f231fd1cfae20ad9cff64e0e59cd610ed6888f5ec79acf7e2469aaef4397.dll
Resource
win10v2004-20230915-en
General
-
Target
ace6f231fd1cfae20ad9cff64e0e59cd610ed6888f5ec79acf7e2469aaef4397
-
Size
25KB
-
MD5
bf6c81873d354587964d02f8e6ec1a89
-
SHA1
a92de76ebd6387e6d6f9ce936436c8835c90a0df
-
SHA256
ace6f231fd1cfae20ad9cff64e0e59cd610ed6888f5ec79acf7e2469aaef4397
-
SHA512
29bd1a68a92452048c6a2dbde394a898d67fc98a229b4356488f4243abd41256b3509469316b8565869950da5f8305d786b08efe8e282fdb53c778c03aed51a4
-
SSDEEP
768:wnV8pb4GNDN2wbqHKaj9cfTIkny9dfPSh7pjB:5jlNxbSRif0kU9Sh1B
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ace6f231fd1cfae20ad9cff64e0e59cd610ed6888f5ec79acf7e2469aaef4397
Files
-
ace6f231fd1cfae20ad9cff64e0e59cd610ed6888f5ec79acf7e2469aaef4397.dll windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE