PyInit_vectors
Behavioral task
behavioral1
Sample
375f4d185c16357758858d3bee61086c6e53935a79b027a5db7f21e62b9299b9.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
375f4d185c16357758858d3bee61086c6e53935a79b027a5db7f21e62b9299b9.dll
Resource
win10v2004-20231222-en
General
-
Target
375f4d185c16357758858d3bee61086c6e53935a79b027a5db7f21e62b9299b9
-
Size
101KB
-
MD5
efba3e835e24dfa25e89f3f1a53f71db
-
SHA1
b1b6519de6d3d127020a5aa833631a3dd1f4d970
-
SHA256
375f4d185c16357758858d3bee61086c6e53935a79b027a5db7f21e62b9299b9
-
SHA512
bf88a511eefdcade62bfbd62e5ba79575eff84362cbece344dc931adc6cc41a0c34360ca2e7d0decb470495c61b79d96d9cd95f84ab3b8e64bd5d0bc7d20a1a0
-
SSDEEP
1536:Ra9f/0GtXdFm6YYvybpmPR1tke82C9X2QWG3rmSR0MGAOFFgkYeb+Jg4:REZtXXJmpED5tOX2C3rmK7GAOFqQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 375f4d185c16357758858d3bee61086c6e53935a79b027a5db7f21e62b9299b9
Files
-
375f4d185c16357758858d3bee61086c6e53935a79b027a5db7f21e62b9299b9.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE