PyInit_interval
Behavioral task
behavioral1
Sample
400fe94d4b9c80f303776e3bafc22e2e63f5c78aa586d99a2b1c0ce2a5d597c1.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
400fe94d4b9c80f303776e3bafc22e2e63f5c78aa586d99a2b1c0ce2a5d597c1.dll
Resource
win10v2004-20230915-en
General
-
Target
400fe94d4b9c80f303776e3bafc22e2e63f5c78aa586d99a2b1c0ce2a5d597c1
-
Size
193KB
-
MD5
2aeec8ca887bc36f11019602e3950f31
-
SHA1
5449f27d56d5072ff5b161488c1f74c5a53eac0e
-
SHA256
400fe94d4b9c80f303776e3bafc22e2e63f5c78aa586d99a2b1c0ce2a5d597c1
-
SHA512
8e84eea0cd5e66cdbb89593d0afe2e9ccfd59c5451bfa760aedbded9e9d385534cf021f93311b984989ea3df4e31ded6ed1e2d7709d71f5f0346e6470c87dff1
-
SSDEEP
3072:OceZOpFNHK4eNR1hS6u8iVzvzWcYT1sMWnLVv2GsNJCZ/Y8VmJQKu:OcfpFNheNI6FiScw1sMMZ+TCZxVmG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 400fe94d4b9c80f303776e3bafc22e2e63f5c78aa586d99a2b1c0ce2a5d597c1
Files
-
400fe94d4b9c80f303776e3bafc22e2e63f5c78aa586d99a2b1c0ce2a5d597c1.dll windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 856KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 191KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE