PyInit_Actions
Behavioral task
behavioral1
Sample
ad6953342aad3ba45629e589264a987b421f487270e2056a5264c932f54b5c1b.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ad6953342aad3ba45629e589264a987b421f487270e2056a5264c932f54b5c1b.dll
Resource
win10v2004-20230915-en
General
-
Target
ad6953342aad3ba45629e589264a987b421f487270e2056a5264c932f54b5c1b
-
Size
24KB
-
MD5
fb44e4c525138719f5c2f94aad72ab55
-
SHA1
a44608bcedd96462beb71104c294b2b5011c5c58
-
SHA256
ad6953342aad3ba45629e589264a987b421f487270e2056a5264c932f54b5c1b
-
SHA512
1b30eba816d74fbc781ddbfa5fd84dfa9b6301275ae62bbb808f6ea9ea9f37be1a257d05b943d7a9a4d303fa1920cbb4bbf76caec331d62dcbbd9e488a6e4eb0
-
SSDEEP
384:HdzgCeLDUgyh36WxK38MOi65kPnaJ1shn9+hmCVVgIZa7gJXOvUo:/eLDUgyh36jOiYmaJ1shnM/Pp+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad6953342aad3ba45629e589264a987b421f487270e2056a5264c932f54b5c1b
Files
-
ad6953342aad3ba45629e589264a987b421f487270e2056a5264c932f54b5c1b.dll windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE