PyInit_vtkSlicerTransformsModuleMRMLDisplayableManagerPython
Static task
static1
Behavioral task
behavioral1
Sample
03d9f75b122cd4fc8b659d4ced8914f92d20bab0e5537e7ed334c40d495e845d.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
03d9f75b122cd4fc8b659d4ced8914f92d20bab0e5537e7ed334c40d495e845d.dll
Resource
win10v2004-20240412-en
General
-
Target
03d9f75b122cd4fc8b659d4ced8914f92d20bab0e5537e7ed334c40d495e845d
-
Size
9KB
-
MD5
4590a7392c46f53b3a7bb820ef3c2e65
-
SHA1
ca59741805008bb428c4145d6bb546d6a8491cde
-
SHA256
03d9f75b122cd4fc8b659d4ced8914f92d20bab0e5537e7ed334c40d495e845d
-
SHA512
bd08c1017dd7f87eea5258227ff61dd321c9dbf50d610ad80ffd716a750e8998455e76db2aa14eeecd945025d3124e7c020cfa4fb3a804b4738d9b6f735b3f76
-
SSDEEP
192:h1P5RSp/AOua0Ly4EuKOjI4TwhwN4iU/Zh:hNuAOua0ncOTTQW4ic
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03d9f75b122cd4fc8b659d4ced8914f92d20bab0e5537e7ed334c40d495e845d
Files
-
03d9f75b122cd4fc8b659d4ced8914f92d20bab0e5537e7ed334c40d495e845d.dll windows:6 windows x64 arch:x64
a2a83253625545c235e9f0c23e1bc118
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
vtkslicertransformsmodulemrmldisplayablemanagerpythond
real_initvtkSlicerTransformsModuleMRMLDisplayableManagerPython
vcruntime140
__C_specific_handler
__std_type_info_destroy_list
memset
api-ms-win-crt-runtime-l1-1-0
_initterm
_cexit
_execute_onexit_table
_initterm_e
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
kernel32
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
Exports
Exports
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ