PyInit__backend_agg
Behavioral task
behavioral1
Sample
597ce11f3f35f4914d4b1bc144dfe76c725b1c96aa22e9804541415ec6057852.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
597ce11f3f35f4914d4b1bc144dfe76c725b1c96aa22e9804541415ec6057852.dll
Resource
win10v2004-20230915-en
General
-
Target
597ce11f3f35f4914d4b1bc144dfe76c725b1c96aa22e9804541415ec6057852
-
Size
69KB
-
MD5
dc0f34c40e59d09b2bf6217a8930b7a1
-
SHA1
4982d9258cf4fa6fd4f920d515506487ebd810a0
-
SHA256
597ce11f3f35f4914d4b1bc144dfe76c725b1c96aa22e9804541415ec6057852
-
SHA512
a6363f352a38050dd2efb3046305fb6d34befa08596477ca0b933614c0399a5a628466a04eaef35f1b05a75b2e1c15522ac218662ad6dcb06a405324826a342a
-
SSDEEP
1536:GPexcI8K+Qc1B06fZomB998jxQiI/VQ0njUI+3MxEt6Uc6LggN7eUaxB+:8hIj+Qc1B0Yibj2i0n9mi6LggGC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 597ce11f3f35f4914d4b1bc144dfe76c725b1c96aa22e9804541415ec6057852
Files
-
597ce11f3f35f4914d4b1bc144dfe76c725b1c96aa22e9804541415ec6057852.dll windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 152KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE