Behavioral task
behavioral1
Sample
a07b1cf78a54dae125dd8a0bde61dd58f4efcf7a798172613e951ba3a180f2e9dll.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a07b1cf78a54dae125dd8a0bde61dd58f4efcf7a798172613e951ba3a180f2e9dll.dll
Resource
win10v2004-20241007-en
General
-
Target
a07b1cf78a54dae125dd8a0bde61dd58f4efcf7a798172613e951ba3a180f2e9dll.exe
-
Size
925KB
-
MD5
4977a55aa956fe1db62c2317c155b17e
-
SHA1
bfb13da5c8177be7fdbed224424acbab1afa1ec8
-
SHA256
a07b1cf78a54dae125dd8a0bde61dd58f4efcf7a798172613e951ba3a180f2e9
-
SHA512
ff2addb8c468d685d8a99dc20df29cc66090f7fe20e836321aa11d736402f46709ad2dd4f6ab965c6c96bb5ac13008ed884f37734a67e4e27de0b1c3d754560a
-
SSDEEP
12288:eaOhG89zv/2F0VSBRgTBZESqvMmi8aWPeY/6Kzseb57PYf/HcqGHEEa24DO:es89z83+B6bvMRcZyBO0fkqiEJO
Malware Config
Extracted
jupyter
217.138.215.85
Signatures
-
Jupyter family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a07b1cf78a54dae125dd8a0bde61dd58f4efcf7a798172613e951ba3a180f2e9dll.exe
Files
-
a07b1cf78a54dae125dd8a0bde61dd58f4efcf7a798172613e951ba3a180f2e9dll.exe.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 923KB - Virtual size: 923KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ