PyInit_token
Behavioral task
behavioral1
Sample
2383708a1245c58bdf29c3b820381eec43b25760cbdf5ddbf66b0a39fd010aa9.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2383708a1245c58bdf29c3b820381eec43b25760cbdf5ddbf66b0a39fd010aa9.dll
Resource
win10v2004-20231215-en
General
-
Target
2383708a1245c58bdf29c3b820381eec43b25760cbdf5ddbf66b0a39fd010aa9
-
Size
79KB
-
MD5
14e3b8081694c43e4f8ef72cf71686d3
-
SHA1
084de5bd68b983578c7f6e81fc23beab71842ef6
-
SHA256
2383708a1245c58bdf29c3b820381eec43b25760cbdf5ddbf66b0a39fd010aa9
-
SHA512
0cea7ce9a28186137a5aae3ae79b465e5ccdeabc51a6a1f32456c329461ee9f9e02d6a98e67fbb9b97b2fd98952dc0ba64b1152b143fd7a6c37e4ad9e303fa15
-
SSDEEP
1536:FT92tDFuMF3aBgjhVGJg6r4HkeO8aGxeGDUJkcNuWiyJ++1mVrYLW:Lje3nGJg6rUkeO8bxe/zvY+1mJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2383708a1245c58bdf29c3b820381eec43b25760cbdf5ddbf66b0a39fd010aa9
Files
-
2383708a1245c58bdf29c3b820381eec43b25760cbdf5ddbf66b0a39fd010aa9.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE