PyInit_lib
Behavioral task
behavioral1
Sample
12c587365d1d921016105110b4b34fb7ba9c877d96f5e0ac18aa04144b8f93c5.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
12c587365d1d921016105110b4b34fb7ba9c877d96f5e0ac18aa04144b8f93c5.dll
Resource
win10v2004-20230915-en
General
-
Target
12c587365d1d921016105110b4b34fb7ba9c877d96f5e0ac18aa04144b8f93c5
-
Size
147KB
-
MD5
d3078044e30985b4f20286abf7ab296b
-
SHA1
3bd49623b497ee41a369035180e9b2f3ac114ee6
-
SHA256
12c587365d1d921016105110b4b34fb7ba9c877d96f5e0ac18aa04144b8f93c5
-
SHA512
c4462d1246b241920673dfe8aaa740217d0a317574b76c822d57dc6a3d7dab288213a507abe336c4dc547c04dc88761d62d4b2ccf4e6e48685291f95322e29b5
-
SSDEEP
3072:weNODJ7AfCg/DQebYe0nMM8sZQbMvXq0Bsx8Vkcpm0BXyZSWbqifO:1N67AfCSqMMt+bMvXELz0BXCj2aO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12c587365d1d921016105110b4b34fb7ba9c877d96f5e0ac18aa04144b8f93c5
Files
-
12c587365d1d921016105110b4b34fb7ba9c877d96f5e0ac18aa04144b8f93c5.dll windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 348KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 145KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE