PyInit_rcont
Behavioral task
behavioral1
Sample
2e9af8606fb357ef517a3c249a96813a3ad6cf88064b72d2d689cefb12d18d83.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2e9af8606fb357ef517a3c249a96813a3ad6cf88064b72d2d689cefb12d18d83.dll
Resource
win10v2004-20240704-en
General
-
Target
2e9af8606fb357ef517a3c249a96813a3ad6cf88064b72d2d689cefb12d18d83
-
Size
114KB
-
MD5
cec87d2775b6a00ff120a31b691b5384
-
SHA1
2d3c480b6d1ad3948bcbf18cd8fa87a63be5e8d7
-
SHA256
2e9af8606fb357ef517a3c249a96813a3ad6cf88064b72d2d689cefb12d18d83
-
SHA512
7d6856eade6314696d23296429a8332ebb70127024879140541fe5c379297682d739b340d762da5ff413ac93707e0e0d1a1315474d9ed14f18d81403924bd5a8
-
SSDEEP
1536:D63FKNgzWb3SPS8n7w7vJIIiijr3+dssjQ0bByX0w1PtIz94+yNMxC2v46HlPuXW:239SDS1nYvJIR2OdsZ0k16x8IC2vQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e9af8606fb357ef517a3c249a96813a3ad6cf88064b72d2d689cefb12d18d83
Files
-
2e9af8606fb357ef517a3c249a96813a3ad6cf88064b72d2d689cefb12d18d83.dll windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 112KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE