PyInit__imagingcms
Behavioral task
behavioral1
Sample
021a1579e4eaaa5a283178ed53c944aaf261b938426c9860e6ac2bb6b6ea0846.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
021a1579e4eaaa5a283178ed53c944aaf261b938426c9860e6ac2bb6b6ea0846.dll
Resource
win10v2004-20240412-en
General
-
Target
021a1579e4eaaa5a283178ed53c944aaf261b938426c9860e6ac2bb6b6ea0846
-
Size
96KB
-
MD5
189065c01a24bf16b5fbaa24ccd81082
-
SHA1
e59f828e3f8c112aaa23b0b455c3a2d3a5f2f173
-
SHA256
021a1579e4eaaa5a283178ed53c944aaf261b938426c9860e6ac2bb6b6ea0846
-
SHA512
e010c3c6c676d04c9546c61cb81f3610c32b6105ec30108978dcda54046a5ec99ffac8f6bf511c0ce36c581e21c8fd39ec2f53ffda7f6d1ebe23c5fb32699f0d
-
SSDEEP
3072:o7aSz/RdbWjuZOKrJ/Zp+dZxm8n7w52+yOUydUR:MaSz/2juZOwZZp+dZxm87w52+hUydU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 021a1579e4eaaa5a283178ed53c944aaf261b938426c9860e6ac2bb6b6ea0846
Files
-
021a1579e4eaaa5a283178ed53c944aaf261b938426c9860e6ac2bb6b6ea0846.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 184KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE