PyInit_py
Behavioral task
behavioral1
Sample
acb0ad2caa5606c28ad2daa22deb5a784877bb5e7665047e0193a9d169a25c4c.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
acb0ad2caa5606c28ad2daa22deb5a784877bb5e7665047e0193a9d169a25c4c.dll
Resource
win10v2004-20231215-en
General
-
Target
acb0ad2caa5606c28ad2daa22deb5a784877bb5e7665047e0193a9d169a25c4c
-
Size
1.7MB
-
MD5
1e3b148ca5ed123cf0330c84488044f5
-
SHA1
33d33bd190c7e6a60c62bf3910f0d1de57d26bb0
-
SHA256
acb0ad2caa5606c28ad2daa22deb5a784877bb5e7665047e0193a9d169a25c4c
-
SHA512
a52286e2af2df951a45bd571675ed9012bac42c0171cd2f0b41f4a9382b7b78da61aac93676aa61fc657bbe79f0da321546ceed3d1c4aceb0e406045bc3b4445
-
SSDEEP
24576:ZSYP4m4tI2uFWeopLdlVmwT22n9mhNWH9Qh3Y8HSFs9xJ8OiRFE8TQgsSVorSo0j:Zr4/G9nYdlzp9gCituuwqkQgPMSo0Y
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource acb0ad2caa5606c28ad2daa22deb5a784877bb5e7665047e0193a9d169a25c4c
Files
-
acb0ad2caa5606c28ad2daa22deb5a784877bb5e7665047e0193a9d169a25c4c.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 9.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE