PyInit__sqlite3
Behavioral task
behavioral1
Sample
_sqlite3.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
_sqlite3.dll
Resource
win10v2004-20231215-en
General
-
Target
_sqlite3.pyd
-
Size
42KB
-
MD5
2b8e17d51a1470582e4b60374cf495a2
-
SHA1
a2663d73d3fd093b59746b9bec30fefae8771975
-
SHA256
4813f4be63298618e543978d7ab02dda48cd771d6681f5373713ffc2fa1c7eba
-
SHA512
d37eafd1643ed7ce4d73f72b13a90c1e6aa3e9e61c6631d42e53fac048ca9a7250f82be36f1f79c05ef90f301d253a777b3c261348749630c53d57e51fcca7cb
-
SSDEEP
768:tAw3Ex/jA2j2nCucS9iC3tdNEwuhJxdkMmjgmgL3IpSRI8sQy88WDG4yr9h:Ow3w/jacgIkdEmgL3BRI8sQyGyrr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource _sqlite3.pyd
Files
-
_sqlite3.pyd.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE