initvolumes
Static task
static1
Behavioral task
behavioral1
Sample
ad07422b51bae4c6f7383ebb9cc1d708f7447dc633f11d096e5ba3dc86517d67.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ad07422b51bae4c6f7383ebb9cc1d708f7447dc633f11d096e5ba3dc86517d67.dll
Resource
win10v2004-20221111-en
General
-
Target
ad07422b51bae4c6f7383ebb9cc1d708f7447dc633f11d096e5ba3dc86517d67
-
Size
106KB
-
MD5
8a4b98e40b1a23f165b3bb17c12ec6d8
-
SHA1
076610183d0d3b3a48cc0a3e7c412745d107c6aa
-
SHA256
ad07422b51bae4c6f7383ebb9cc1d708f7447dc633f11d096e5ba3dc86517d67
-
SHA512
8ca10b2f2b265b165e638744b9a18af8b8cbb719021a2be1e6d74b65118f6548ef0dbc6c3f3d6a40878f5d9b88db6d70a39a8869b4bdfe5b0d49d2624c2f2875
-
SSDEEP
1536:WjjLDYqW6XMOhYp367jpCTUKPi9J1/PT6KqMF1yNJys8Q15y711lDoM:W3LDaqCtoj4T569f/gos8QvN
Malware Config
Signatures
Files
-
ad07422b51bae4c6f7383ebb9cc1d708f7447dc633f11d096e5ba3dc86517d67.dll windows x64
0c3800bf3e724aa8c450eab746fa99de
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
python27
PyString_Type
PyString_AsString
PyDict_SetItem
_PyString_Eq
PyUnicodeUCS2_Compare
PyExc_ValueError
PyBaseObject_Type
PyErr_WriteUnraisable
PyObject_IsSubclass
PyClass_Type
PyErr_GivenExceptionMatches
PyObject_SetAttr
PyErr_WarnEx
PyOS_snprintf
PyObject_GetAttrString
PyObject_CallFunctionObjArgs
PyInt_FromLong
PyDict_New
PyModule_GetDict
PyList_New
PyExc_ImportError
PyErr_ExceptionMatches
PyExc_AttributeError
PyFrozenSet_New
PyFrozenSet_Type
PyObject_SetAttrString
PyType_Ready
PyErr_Clear
PyImport_AddModule
PyString_FromString
PyString_InternFromString
PyObject_GC_Track
_PyObject_GC_New
PyObject_Free
PyObject_GC_Del
PyObject_ClearWeakRefs
PyObject_GC_UnTrack
PyMethod_New
PyString_FromFormat
PyTuple_GetItem
PyTuple_GetSlice
PyObject_SetItem
PyExc_KeyError
_Py_TrueStruct
PyObject_Not
_PyObject_GetDictPtr
PyMem_Realloc
PyMem_Malloc
PyString_InternInPlace
PyLong_FromUnsignedLong
PyLong_FromUnsignedLongLong
Py_GetVersion
PyCapsule_GetPointer
PyCapsule_GetName
PyCapsule_IsValid
PyModule_GetName
PyDict_GetItemString
PyObject_Hash
PyString_FromStringAndSize
PyUnicodeUCS2_DecodeUTF8
PyObject_IsTrue
PyInt_FromSize_t
PyErr_SetObject
_PyType_Lookup
PyInstance_Type
PyUnicodeUCS2_AsEncodedString
PyUnicode_Type
PyUnicodeUCS2_FromUnicode
PyUnicodeUCS2_AsUnicode
PyNumber_Add
PyUnicodeUCS2_Concat
PyUnicodeUCS2_Split
PyMem_Free
PyMethod_Type
PyString_Format
PyObject_Unicode
PyNumber_Remainder
PyDict_Clear
PyNumber_Subtract
PyExc_StopIteration
_PyDict_NewPresized
PyExc_Exception
PyObject_GetIter
PyTuple_Type
PyList_Type
PyDict_Type
PyImport_ImportModule
PyCFunction_NewEx
Py_InitModule4_64
PyUnicodeUCS2_FromStringAndSize
PyFrame_Type
PyObject_RichCompare
PyUnicodeUCS2_FromObject
PyBaseString_Type
PyInt_Type
PyLong_AsLongLong
PyFunction_Type
PyCFunction_Type
PyUnicodeUCS2_Tailmatch
PyTraceBack_Type
PyExc_TypeError
PyExc_BaseException
PyType_IsSubtype
PyErr_NormalizeException
PyObject_Call
PyErr_Occurred
PyExc_SystemError
PyErr_SetString
PyDict_Size
_Py_CheckRecursionLimit
_Py_CheckRecursiveCall
PyDict_Next
PyTuple_New
PyEval_EvalCodeEx
_PyThreadState_Current
PyFrame_New
PyEval_EvalFrameEx
PyDict_GetItem
PyInt_FromSsize_t
PyObject_GetItem
PyExc_NameError
PyErr_Format
PyObject_GetAttr
PyTuple_Pack
_Py_NoneStruct
PyCode_New
_Py_ZeroStruct
PySequence_Contains
PyTraceBack_Here
PyList_Append
msvcr90
_onexit
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
__C_specific_handler
_amsg_exit
_decode_pointer
_encoded_null
free
_initterm_e
_initterm
_malloc_crt
_encode_pointer
memcmp
_lock
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
Sleep
FindFirstVolumeW
FindNextVolumeW
FindVolumeClose
GetDriveTypeW
GetDiskFreeSpaceExW
GetVolumePathNamesForVolumeNameW
GetLastError
GetVolumeInformationW
GetVolumeInformationByHandleW
GetSystemTimeAsFileTime
Exports
Exports
Sections
.text Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ