__init__[.]pyd

Sharing

Copy URL Twitter E-mail

General

Target

__init__.pyd
Size

20KB
MD5

bb25943205614cc5b43bcaee0c02ef59
SHA1

71ebd5ee3582b9c83e134b34b1dc1125945405ca
SHA256

029d4663c2c0d0c29b67b47939dbb38dd30ad76f14970be55d44116d5d0d705c
SHA512

e664fff5ccd58638c2dee7271fc253460b60acbd9d37e002d8418aaa9c2019dc578500a199a76c22b73d7334533bc6500933d67013d058d2b452a70b0bb03347
SSDEEP

384:WoOagG2CZKzrm0hgHWf9ST9MEiTneNmlFt4lnrTJlEUyF:lO4SzB8WlST6EiTeNmlinl

Score

1^/10

Malware Config

Signatures

Files

__init__.pyd
.dll windows x64

f96a50a81bfaed889558085cb4b03787

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

python311

PyImport_AddModule
PyObject_GetAttrString
PyErr_Clear
PyUnicode_Decode
_PyObject_GenericGetAttrWithDict
PyDict_SetItem
PyDict_New
_PyDict_GetItem_KnownHash
PyUnicode_FromFormat
PyModuleDef_Init
PyBytes_FromStringAndSize
PyMem_Realloc
PyMem_Malloc
PyExc_ImportError
_Py_TrueStruct
PyUnicode_FromString
PyUnicode_FromStringAndSize
_PyObject_GetDictPtr
PyList_New
PyUnicode_AsUTF8
PyObject_Not
PyErr_ExceptionMatches
PyModule_GetDict
PyImport_GetModuleDict
_Py_Dealloc
PyModule_NewObject
PyImport_GetModule
_Py_FalseStruct
PyErr_Format
PyErr_SetString
PyExc_AttributeError
PyDict_SetItemString
PyTuple_New
_Py_NoneStruct
PyModule_GetName
PyObject_GetAttr
Py_GetVersion
PyInterpreterState_GetID
PyUnicode_Concat
PyObject_Hash
PyObject_SetAttrString
PyExc_RuntimeError
_PyThreadState_UncheckedGet
PyTraceBack_Here
PyObject_GenericGetAttr
PyErr_Occurred
PyImport_ImportModuleLevelObject
PyFrame_New
PyErr_WarnEx
PyErr_GivenExceptionMatches
PyCode_NewEmpty
PyThreadState_Get
PyOS_snprintf
PyUnicode_InternFromString
PyObject_SetAttr
PyDict_GetItemString
PyBaseObject_Type

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
IsDebuggerPresent
InitializeSListHead

vcruntime140

memset
__C_specific_handler
__std_type_info_destroy_list
memcpy

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initterm
_execute_onexit_table
_cexit
_initialize_onexit_table

Exports

Exports

PyInit___init__
PyInit_stage

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f96a50a81bfaed889558085cb4b03787

Headers

DLL Characteristics

File Characteristics

Imports

python311

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 1024B - Virtual size: 2KB

.pdata Size: 1024B - Virtual size: 756B

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 132B

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 1024B - Virtual size: 2KB

.pdata
Size: 1024B - Virtual size: 756B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 132B