PyInit__elementpath
Behavioral task
behavioral1
Sample
b5ac426364db905c1613016abba8dc57a48ecc3db0a843b637da4f1a3adf69c9.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b5ac426364db905c1613016abba8dc57a48ecc3db0a843b637da4f1a3adf69c9.dll
Resource
win10v2004-20230915-en
General
-
Target
b5ac426364db905c1613016abba8dc57a48ecc3db0a843b637da4f1a3adf69c9
-
Size
50KB
-
MD5
59753373d7886549a05b852a6133f142
-
SHA1
644c33c47c5c86b7171a85abce98cd16e6818e26
-
SHA256
b5ac426364db905c1613016abba8dc57a48ecc3db0a843b637da4f1a3adf69c9
-
SHA512
035e73f08dfb913b3c8e6d214477f7f136f5a01f19e531004df8584fad0c5ed45b449f1a2022ccd10831c2a57ad3e4ed8c395646de5152459d232387887775ff
-
SSDEEP
768:3IHLdCO79magxyAtZQFziXyTbVO7Y1FV+8yFkEMiQvwBB/Fnkg0e0M:32Ld7d3AC+XyTbVBk8GkF4hFk6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5ac426364db905c1613016abba8dc57a48ecc3db0a843b637da4f1a3adf69c9
Files
-
b5ac426364db905c1613016abba8dc57a48ecc3db0a843b637da4f1a3adf69c9.dll windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE