PyInit__mklinit
Static task
static1
Behavioral task
behavioral1
Sample
610ef530cd40b562d596cb8e5f4b68754f912e2e604d313b993275a7f37179af.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
610ef530cd40b562d596cb8e5f4b68754f912e2e604d313b993275a7f37179af.dll
Resource
win10v2004-20240412-en
General
-
Target
610ef530cd40b562d596cb8e5f4b68754f912e2e604d313b993275a7f37179af
-
Size
10KB
-
MD5
6a454c1c48882ab90c13a9632c66565b
-
SHA1
6a66c9838d169bf0a01a1523364f645caec070de
-
SHA256
610ef530cd40b562d596cb8e5f4b68754f912e2e604d313b993275a7f37179af
-
SHA512
1459df51652d4b45bfc46c97aa7a161eaae871249d03523692cbf62b2db448d94f20d6a39b118db130b5e8a966f628bb272e27fac6331409aa25554f1a418116
-
SSDEEP
96:GE+tUWkbXMA2SZ7XqqEU4yLGQc/fNABejJvtUZe0rSmzXRVH7sDJ9UuPBX:GE+ojMwIqEXIGphaeJoXRlIDLUiX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 610ef530cd40b562d596cb8e5f4b68754f912e2e604d313b993275a7f37179af
Files
-
610ef530cd40b562d596cb8e5f4b68754f912e2e604d313b993275a7f37179af.dll windows:6 windows x64 arch:x64
62464b911cbcc96d06d33c592f77aad0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mkl_rt.2
MKL_Set_Interface_Layer
python39
PyModule_Create2
kernel32
IsDebuggerPresent
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
vcruntime140
__std_type_info_destroy_list
__C_specific_handler
memset
api-ms-win-crt-runtime-l1-1-0
_execute_onexit_table
_cexit
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ