Behavioral task
behavioral1
Sample
gABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZLDrrviUHrGPaECWF3NYwYDQVWpmOfWzZMSTYQIW_HN6lRnPTYHQ7PFM.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
gABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZLDrrviUHrGPaECWF3NYwYDQVWpmOfWzZMSTYQIW_HN6lRnPTYHQ7PFM.dll
Resource
win10v2004-20231215-en
General
-
Target
gABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZLDrrviUHrGPaECWF3NYwYDQVWpmOfWzZMSTYQIW_HN6lRnPTYHQ7PFM.dll
-
Size
2.2MB
-
MD5
463f63735653d4c7066198a8262174be
-
SHA1
5388a4a546389bbe328f7b32f703a3df389e573a
-
SHA256
c35551a3e254760ba218e0c1ad226c0b697e68ac40b15562580207ba751add6e
-
SHA512
21d43124ef307e5b4e1bd9ceb673d4559f3d2ffa89a634e78316e9c794f43e849a32a516ed61f7d0d756da45e743502a1726f106f4cf9e0d8d4ea3627add9d1f
-
SSDEEP
24576:dAgSu08h4oDgL42E7gPyL45rsDtD6gd253nceTT0/gTecflLk:pgGgL42EM6LsQVo5XceH0cZ
Malware Config
Signatures
-
Jupyter family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource gABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZLDrrviUHrGPaECWF3NYwYDQVWpmOfWzZMSTYQIW_HN6lRnPTYHQ7PFM.dll
Files
-
gABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZLDrrviUHrGPaECWF3NYwYDQVWpmOfWzZMSTYQIW_HN6lRnPTYHQ7PFM.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ