PyInit_unicodedata
Behavioral task
behavioral1
Sample
097173a0e8243f24652547b44a10a43887755a5490368e6cea2888dc0c82aeb5.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
097173a0e8243f24652547b44a10a43887755a5490368e6cea2888dc0c82aeb5.dll
Resource
win10v2004-20240419-en
General
-
Target
097173a0e8243f24652547b44a10a43887755a5490368e6cea2888dc0c82aeb5
-
Size
203KB
-
MD5
dc06175f0e059ec5e02355a819b85564
-
SHA1
c175c0250d5b319d355dc57d523bd9a6c7508e83
-
SHA256
097173a0e8243f24652547b44a10a43887755a5490368e6cea2888dc0c82aeb5
-
SHA512
b4aff0f6542d26c2712160cd478653ffd0f95beb657d0874cdc62b4a953a336218c9ba53c071c69d396fbadac7a75ecb3b125ac7e249aaf418850ccfc1418354
-
SSDEEP
6144:jSRUGXbfkVYUa/QUIpU6/z8U++NrsWRedF0m0DvoS:jILTcaYAcJvsJn0fvoS
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 097173a0e8243f24652547b44a10a43887755a5490368e6cea2888dc0c82aeb5
Files
-
097173a0e8243f24652547b44a10a43887755a5490368e6cea2888dc0c82aeb5.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 556KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 201KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE