PyInit__lzma
Behavioral task
behavioral1
Sample
bb0ebce342c72e08bafeac9947dcb1a8dedc2f4ef478fcf3c0384ab6fc021f8b.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
bb0ebce342c72e08bafeac9947dcb1a8dedc2f4ef478fcf3c0384ab6fc021f8b.dll
Resource
win10v2004-20240419-en
General
-
Target
bb0ebce342c72e08bafeac9947dcb1a8dedc2f4ef478fcf3c0384ab6fc021f8b
-
Size
85KB
-
MD5
b0224bd302ab85579dc7fcc715bf75c8
-
SHA1
24130b7664eaba68ca8948ee3a2a604024b55c3c
-
SHA256
bb0ebce342c72e08bafeac9947dcb1a8dedc2f4ef478fcf3c0384ab6fc021f8b
-
SHA512
39d347c2832131bbe2b1045d45644bb212fd9a9d52425d8ffbfca605ed44de45b974ae242c62252fced915b29065ad6b5e1dbe08f23b6ecc786fd747c5e50fe5
-
SSDEEP
1536:aztOcCoB/MIuDjIZzA6ReT/moFWI9EFEaquOtKF6tHwiZ06DFUiMAI5e1Oj7SyR:SMnAyD0Zs7TuoFq1clj3I5e1Ojn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb0ebce342c72e08bafeac9947dcb1a8dedc2f4ef478fcf3c0384ab6fc021f8b
Files
-
bb0ebce342c72e08bafeac9947dcb1a8dedc2f4ef478fcf3c0384ab6fc021f8b.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE