PyInit_reduction
Behavioral task
behavioral1
Sample
7a9d4cdb91142a05e44b95559551b2ecc49348765c41d9f92e864262c3b1cc3c.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
7a9d4cdb91142a05e44b95559551b2ecc49348765c41d9f92e864262c3b1cc3c.dll
Resource
win10v2004-20230915-en
General
-
Target
7a9d4cdb91142a05e44b95559551b2ecc49348765c41d9f92e864262c3b1cc3c
-
Size
82KB
-
MD5
6fda7e61b82daaa313d4a5ead964377f
-
SHA1
1bf74fd77dc4aea8ef36d4cf5949ce1d5a3d55e0
-
SHA256
7a9d4cdb91142a05e44b95559551b2ecc49348765c41d9f92e864262c3b1cc3c
-
SHA512
f46993b9e81938696d7be46be2b01c0ac8d919d664566078e764a4bd357d628d7a1c58dd33ccecef6df5c2c3c433c1d97827823984ceea6906bcdaf8506f0a6e
-
SSDEEP
1536:ZLV5Oj8+k/tY5c7JS5I+uNhqc8KsZfBC6MGGvBZhTJ41:NKIKOSSDqCubMzl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7a9d4cdb91142a05e44b95559551b2ecc49348765c41d9f92e864262c3b1cc3c
Files
-
7a9d4cdb91142a05e44b95559551b2ecc49348765c41d9f92e864262c3b1cc3c.dll windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE