PyInit_WishPlayer_main
Behavioral task
behavioral1
Sample
021b452821f34a2c45b93a560909e0c7b01a40de0c9a61f912079dbc9b874d3b.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
021b452821f34a2c45b93a560909e0c7b01a40de0c9a61f912079dbc9b874d3b.dll
Resource
win10v2004-20230915-en
General
-
Target
021b452821f34a2c45b93a560909e0c7b01a40de0c9a61f912079dbc9b874d3b
-
Size
582KB
-
MD5
afb4c1c3d53dc79c0b5289d190f94859
-
SHA1
30159f80052fb7f0d9d47b4223f6a658666958cf
-
SHA256
021b452821f34a2c45b93a560909e0c7b01a40de0c9a61f912079dbc9b874d3b
-
SHA512
fcda769f83d45ae5366f694baab3b436d6d91c7cbb458bbff653f65bcfe2435ada3a79d9de4a8e0536df3239cc28e54ee34b9f962936a6721f8b433058a6d53f
-
SSDEEP
12288:Wi/Dwc5Nn2Jy4MZksUq46/ftjPW0OdDjasrdFqwXUeJp:WiEcDBvklO/f5PW0u/hFqwEeJp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 021b452821f34a2c45b93a560909e0c7b01a40de0c9a61f912079dbc9b874d3b
Files
-
021b452821f34a2c45b93a560909e0c7b01a40de0c9a61f912079dbc9b874d3b.dll windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 580KB - Virtual size: 580KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE