6dea0647c0c293a677315d3a3955a1850f79f3fc4e6ae0c1d404016e169a6f30

Sharing

Copy URL

Twitter E-mail

General

Target

6dea0647c0c293a677315d3a3955a1850f79f3fc4e6ae0c1d404016e169a6f30
Size

15KB
MD5

68e52719974aae79785cdeb289e8c520
SHA1

7bc918b6d98edd7e29fc0761045b69208fa5a989
SHA256

6dea0647c0c293a677315d3a3955a1850f79f3fc4e6ae0c1d404016e169a6f30
SHA512

646b70e333084f86b40ec0e7cc4273c4bb735f261459155f6976345ab0d0b76e1236c6b5472a89d038f1dcaef81d1d45705084f17f9ae8ac66fdbc04833286a0
SSDEEP

384:NcXoQLTp3JTjGmGcbJIbpzx7yma0sjaILO7:9Ap3UVmq9Ra0IaILO7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6dea0647c0c293a677315d3a3955a1850f79f3fc4e6ae0c1d404016e169a6f30

Files

6dea0647c0c293a677315d3a3955a1850f79f3fc4e6ae0c1d404016e169a6f30
.dll windows x86

4922a2e5e69f4abeae5e93272fc12a57

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

PlaySoundW

kernel32

Beep
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
UnhandledExceptionFilter

user32

MessageBeep

python310

PyModule_Create2
PyDict_SetItem
PyMem_Free
PyExc_TypeError
PyUnicode_FromString
PyEval_RestoreThread
PyBuffer_Release
PyErr_SetExcFromWindowsErr
PyObject_GetBuffer
PyUnicode_AsWideCharString
PyModule_GetDict
_Py_Dealloc
PyErr_Format
PyExc_ValueError
_PyArg_UnpackKeywords
PyErr_SetString
_Py_NoneStruct
PyLong_FromLong
PyExc_RuntimeError
PyEval_SaveThread
PyErr_Occurred
_PyLong_AsInt

vcruntime140

_except_handler4_common
memset
__std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

_cexit
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_execute_onexit_table
_initterm
_initterm_e
_seh_filter_dll

Exports

Exports

PyInit_winsound

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4922a2e5e69f4abeae5e93272fc12a57

Headers

DLL Characteristics

File Characteristics

Imports

winmm

kernel32

user32

python310

vcruntime140

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 1024B - Virtual size: 600B

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1024B - Virtual size: 600B