PyInit_win32console
Behavioral task
behavioral1
Sample
00f088c766377d42a9ab10ae6b7e6f29f177a00c862a117cab51de6621c3faed.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
00f088c766377d42a9ab10ae6b7e6f29f177a00c862a117cab51de6621c3faed.dll
Resource
win10v2004-20240508-en
General
-
Target
00f088c766377d42a9ab10ae6b7e6f29f177a00c862a117cab51de6621c3faed
-
Size
25KB
-
MD5
69bbcf1e0b3389a95a953e50f072f961
-
SHA1
889f3fce22cef8b15df5d772410d20b13da32110
-
SHA256
00f088c766377d42a9ab10ae6b7e6f29f177a00c862a117cab51de6621c3faed
-
SHA512
08e7bba76e5368a7af2fa284bf4c2c380c8179d1ffa53a771b419a2d1e5826b5821ba08bff2a2a21cb1bca5305804d20be72b73872a914cdc1e1c4489045a14d
-
SSDEEP
384:ojQIxWWIF7pr6U7+JtPKfzoa/7vCOC35CLQu/c5OZa7gJXSq1/pAU:MQ1W87pro/PKfUSCP5CLQu/ppCq1/p
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00f088c766377d42a9ab10ae6b7e6f29f177a00c862a117cab51de6621c3faed
Files
-
00f088c766377d42a9ab10ae6b7e6f29f177a00c862a117cab51de6621c3faed.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE