PyInit_trainable_pipe
Behavioral task
behavioral1
Sample
92a890d965112dac3079b0926b68aadeb4ebbe6b23e8bfbf0cbb6030f84fa99b.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
92a890d965112dac3079b0926b68aadeb4ebbe6b23e8bfbf0cbb6030f84fa99b.dll
Resource
win10v2004-20231222-en
General
-
Target
92a890d965112dac3079b0926b68aadeb4ebbe6b23e8bfbf0cbb6030f84fa99b
-
Size
91KB
-
MD5
a33ee751b1fa459992057e5c2294cd98
-
SHA1
fe03026c9b1333a6bbe7eef7eea09e21d9d4da58
-
SHA256
92a890d965112dac3079b0926b68aadeb4ebbe6b23e8bfbf0cbb6030f84fa99b
-
SHA512
e60177900c041ceee38fee20f184f0f609bb69a2609efbbb19e2371f682e951a49fab363da45705b44a93c6d464bd4b403abc2c4078ae6af09854ed1e373c990
-
SSDEEP
1536:ghhX56x7YMSuv0BViGTcva5NMg4QhdfO8b3mHL4PiYYzMk3q65N0mbv:ghAYMz6F5Og4Qhd203mrTRJq9m
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 92a890d965112dac3079b0926b68aadeb4ebbe6b23e8bfbf0cbb6030f84fa99b
Files
-
92a890d965112dac3079b0926b68aadeb4ebbe6b23e8bfbf0cbb6030f84fa99b.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 89KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE