PyInit_backend_c
General
-
Target
backend_c.cp312-win_amd64.pyd
-
Size
174KB
-
MD5
4dd9c42a89ddf77fef7aa34a71c5b480
-
SHA1
fc4c03ffcf81fb255b54c4f16f6ed90d5a1f37d4
-
SHA256
f76dc6f9ace0d356dbfdea443c3d43232342f48384f4afc7293b2ace813477e7
-
SHA512
02c04fa2fa1d8136730f2596740049664a4f9343fb56de195988d80151cb38e67e7fee1c140d2c5d7c439f19df377cc6e253f5178711f72b821eae3076b4e142
-
SSDEEP
3072:nrtRPeoIjrsmsmFwkKiTsW0zp9zFEVw7qH0/Sc25fqVnY3QJEq7e:r/RIjwmkOsppQs/l4COQJ9e
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource backend_c.cp312-win_amd64.pyd
Files
-
backend_c.cp312-win_amd64.pyd.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 360KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE