PyInit_Utils
Behavioral task
behavioral1
Sample
49779957a8093dc3338b7e182dea50c677ddbaf5e7bbb59b89fe98d183aa0bcf.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
49779957a8093dc3338b7e182dea50c677ddbaf5e7bbb59b89fe98d183aa0bcf.dll
Resource
win10v2004-20230915-en
General
-
Target
49779957a8093dc3338b7e182dea50c677ddbaf5e7bbb59b89fe98d183aa0bcf
-
Size
85KB
-
MD5
c55f7a7655e21ddc1272b13a3f0a874e
-
SHA1
dbf407948675c6fd3f29246756ee1c22e3388c92
-
SHA256
49779957a8093dc3338b7e182dea50c677ddbaf5e7bbb59b89fe98d183aa0bcf
-
SHA512
37554067090a84064b12319d7b0f8504086edf848c0364c368b8c6132fb7e232df0eb9770c0d012a325845e2cb02f7eccbbb80fa0707e7cef4a56709013fdf0a
-
SSDEEP
1536:rqErzlHD/KaqkaSOh1R4EVtKLZKtuBbIdSSTv11cGHspltdnCP5E3aoEIpA5:1f1O/emXVgLZFSSSTDdMbznCloT6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49779957a8093dc3338b7e182dea50c677ddbaf5e7bbb59b89fe98d183aa0bcf
Files
-
49779957a8093dc3338b7e182dea50c677ddbaf5e7bbb59b89fe98d183aa0bcf.dll windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 184KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE