OCB_decrypt
OCB_digest
OCB_encrypt
OCB_start_operation
OCB_stop_operation
OCB_transcrypt
OCB_update
PyInit__raw_ocb
Static task
static1
General
-
Target
_raw_ocb.pyd
-
Size
28KB
-
MD5
0f822eedd33a1834a9feb98453df0364
-
SHA1
f3590124f72f3982076b2c9730bd18d2a106cc0c
-
SHA256
2b4c6f82c9406c7763a0a064e99e5cbcfff8d71c3b6c9be28009341de3b98eb9
-
SHA512
d8b1c0aae3d1897506650564a0eb48241018f8b5a039be11e0f538856a80aa8fc6dfb842d3c132a7812fa6e6469417adc4d00cb6d0bc7281a58ed125ddc339fb
-
SSDEEP
768:PoxWpACOXBYBjsB3Tcb+QcOY4xmSQLLa:uWpAC6YBjOTdQo4xmNL
Score
N/A
Malware Config
Signatures
Files
-
_raw_ocb.pyd.dll windows x64
9cb819c684c2d71d970fe515e12e034c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
api-ms-win-crt-heap-l1-1-0
free
calloc
api-ms-win-crt-runtime-l1-1-0
_wassert
_execute_onexit_table
_initterm
_initterm_e
_seh_filter_dll
abort
_configure_narrow_argv
terminate
_cexit
_initialize_onexit_table
_initialize_narrow_environment
kernel32
RtlUnwindEx
LoadLibraryExW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InterlockedFlushSList
SetLastError
GetLastError
api-ms-win-crt-string-l1-1-0
wcsncmp
Exports
Exports
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ