fcb51f037ae2d3b0704f5e47459a60652758c3777e3f1ef3834e80bd652326d0

Sharing

Copy URL Twitter E-mail

General

Target

fcb51f037ae2d3b0704f5e47459a60652758c3777e3f1ef3834e80bd652326d0
Size

256KB
MD5

9cdba389dcecdc7ae764bd164dbbee6d
SHA1

b6a6ad3dbcf2313e9957146b874a6230196c926c
SHA256

fcb51f037ae2d3b0704f5e47459a60652758c3777e3f1ef3834e80bd652326d0
SHA512

bf9a1ffeaf17c02c75bec31b4960b46b21a14d1fa9f19388317f26e9fc9b8cbe57d110a3f927359222bd3c36cf2a6d80bc55619999db7ddf1ff9d157bd85a2f6
SSDEEP

6144:PSygdDr7ozErnHs0wOruF23RQ6x1LHmJmas1yrXmjwTXTX8:6ygdX7cErnHlw2uF23x1bsmjwf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcb51f037ae2d3b0704f5e47459a60652758c3777e3f1ef3834e80bd652326d0

Files

fcb51f037ae2d3b0704f5e47459a60652758c3777e3f1ef3834e80bd652326d0
.dll windows x64

113e03fded8180bbd5543ecd2376262d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

python39

PyModule_NewObject
PyMethod_Type
PyLong_Type
PyType_IsSubtype
PyNumber_Subtract
PyExc_OverflowError
_Py_Dealloc
PyImport_GetModuleDict
PyModule_GetDict
PyErr_ExceptionMatches
PyCapsule_GetPointer
PyModule_AddObject
PyLong_AsLong
PyObject_Not
PyUnicode_AsUTF8
PyUnicode_FromFormat
PyList_New
PyImport_AddModule
PyObject_GetAttrString
PyErr_Clear
PyUnicode_Decode
PyException_SetTraceback
PyCapsule_New
PyDict_SetItem
PyDict_New
_PyDict_GetItem_KnownHash
PyList_Type
PyFloat_FromDouble
PyObject_GetItem
PyModuleDef_Init
PyBytes_FromStringAndSize
PyNumber_Long
PyExc_TypeError
PyMem_Realloc
PyCapsule_Type
PyObject_IsTrue
PyExc_NameError
PyTuple_Pack
_PyUnicode_Ready
PyMem_Malloc
Py_EnterRecursiveCall
PyExc_ImportError
_Py_TrueStruct
PyExc_SystemError
_PyUnicode_FastCopyCharacters
_Py_FalseStruct
PyEval_EvalFrameEx
_PyType_Lookup
PyObject_Call
PyNumber_InPlaceSubtract
PyEval_RestoreThread
PyUnicode_FromStringAndSize
_PyObject_GetDictPtr
PyFloat_Type
PyFrame_Type
PyLong_FromLongLong
PyDict_SetItemString
PyLong_FromString
PyTuple_New
PyLong_AsLongLong
_Py_NoneStruct
PyLong_AsUnsignedLongLong
PyObject_GetAttr
Py_GetVersion
PyLong_FromUnsignedLongLong
PyInterpreterState_GetID
PyObject_Hash
PyLong_FromLong
PyObject_SetAttrString
PyExc_RuntimeError
_PyThreadState_UncheckedGet
PyEval_SaveThread
PyTraceBack_Here
PyLong_FromSsize_t
PyErr_Occurred
PyErr_NormalizeException
PyImport_ImportModuleLevelObject
PyImport_ImportModule
Py_LeaveRecursiveCall
PyExc_DeprecationWarning
PyFrame_New
PyFunction_Type
PyErr_WarnEx
PyLong_AsUnsignedLong
PyErr_GivenExceptionMatches
PyCode_NewEmpty
PyErr_SetObject
PyExc_Exception
PyThreadState_Get
PyOS_snprintf
PyCFunction_Type
PyUnicode_InternFromString
PyObject_SetAttr
PyTuple_Type
PyObject_RichCompare
PyErr_Format
PyLong_FromUnsignedLong
PyExc_ValueError
PyEval_EvalCodeEx
PyErr_WarnFormat
PyErr_SetString
PyUnicode_New
PyExc_AttributeError
PyDict_GetItemString
PyBaseObject_Type

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent

vcruntime140

__std_type_info_destroy_list
__C_specific_handler
memset
memcpy

api-ms-win-crt-math-l1-1-0

log1p
log1pf
acos
ceil
cos
exp
expf
expm1
fmod
log
logf
pow
powf
sqrt
sqrtf
floor

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_cexit

Exports

Exports

PyInit__bounded_integers
random_beta
random_binomial
random_bounded_bool_fill
random_bounded_uint16_fill
random_bounded_uint32_fill
random_bounded_uint64
random_bounded_uint64_fill
random_bounded_uint8_fill
random_buffered_bounded_bool
random_buffered_bounded_uint16
random_buffered_bounded_uint32
random_buffered_bounded_uint8
random_chisquare
random_exponential
random_f
random_gamma
random_gamma_f
random_geometric
random_geometric_search
random_gumbel
random_interval
random_laplace
random_logistic
random_lognormal
random_logseries
random_multinomial
random_negative_binomial
random_noncentral_chisquare
random_noncentral_f
random_normal
random_pareto
random_poisson
random_positive_int
random_positive_int32
random_positive_int64
random_power
random_rayleigh
random_standard_cauchy
random_standard_exponential
random_standard_exponential_f
random_standard_exponential_fill
random_standard_exponential_fill_f
random_standard_exponential_inv_fill
random_standard_exponential_inv_fill_f
random_standard_gamma
random_standard_gamma_f
random_standard_normal
random_standard_normal_f
random_standard_normal_fill
random_standard_normal_fill_f
random_standard_t
random_standard_uniform
random_standard_uniform_f
random_standard_uniform_fill
random_standard_uniform_fill_f
random_triangular
random_uint
random_uniform
random_vonmises
random_wald
random_weibull
random_zipf

Sections

.text
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

113e03fded8180bbd5543ecd2376262d

Headers

DLL Characteristics

File Characteristics

Imports

python39

kernel32

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 208KB - Virtual size: 208KB

.rdata Size: 38KB - Virtual size: 38KB

.data Size: 3KB - Virtual size: 9KB

.pdata Size: 4KB - Virtual size: 3KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 348B

.text
Size: 208KB - Virtual size: 208KB

.rdata
Size: 38KB - Virtual size: 38KB

.data
Size: 3KB - Virtual size: 9KB

.pdata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 348B