Attack
Py_Main
Static task
static1
Behavioral task
behavioral1
Sample
858f47433bbbac47ca53e2b525669ab130c460b3f1b2c8269cf1ee8e47477f1e.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
858f47433bbbac47ca53e2b525669ab130c460b3f1b2c8269cf1ee8e47477f1e.dll
Resource
win10v2004-20241007-en
Target
858f47433bbbac47ca53e2b525669ab130c460b3f1b2c8269cf1ee8e47477f1e
Size
60KB
MD5
98fee9d5e8bd1cae41dde318c4bc4454
SHA1
e92dfe656dbb0bb37cd3c32487275f2e981bdb41
SHA256
858f47433bbbac47ca53e2b525669ab130c460b3f1b2c8269cf1ee8e47477f1e
SHA512
209155c35eebab1ae24887cf350620a88d238f910c6e2a0bfe004e5ed66e67cf5df4b3c6ffccf4f3ba51c34764776a4dcf585d3d46021fc4d20c5abf85543501
SSDEEP
384:HWfhYLzmulT1IKbUCSXgAG/KPFYe+l6KcjuuZAC1jbgim4Hq80IKXjfYqDEtNde1:2+DdUS/KDTjhLjdm4K80I+/YtaI+30Y
Checks for missing Authenticode signature.
resource |
---|
858f47433bbbac47ca53e2b525669ab130c460b3f1b2c8269cf1ee8e47477f1e |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
CloseHandle
ConvertDefaultLocale
CreateFileA
CreateFileW
CreateThread
GetLastError
GetProcessHeap
GetTempPathA
HeapAlloc
HeapFree
MultiByteToWideChar
ReadFile
SetCriticalSectionSpinCount
WriteFile
GetWindowContextHelpId
GetWindowLongPtrW
IsDialogMessageW
IsWindowVisible
MessageBoxA
RegisterClassW
Attack
Py_Main
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ