PyInit__asyncio
Static task
static1
Behavioral task
behavioral1
Sample
a745f50ce239f8f107eceb8a3cf9cfee8f0bb98fef6b35f89e5a82e5ad92b1e9.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
a745f50ce239f8f107eceb8a3cf9cfee8f0bb98fef6b35f89e5a82e5ad92b1e9.dll
Resource
win10v2004-20230703-en
General
-
Target
a745f50ce239f8f107eceb8a3cf9cfee8f0bb98fef6b35f89e5a82e5ad92b1e9
-
Size
44KB
-
MD5
8afc69ec7957c9373e4a23040d98cbe9
-
SHA1
0c7012a1b3bbdda7483147b21be1a769b7f8fbd7
-
SHA256
a745f50ce239f8f107eceb8a3cf9cfee8f0bb98fef6b35f89e5a82e5ad92b1e9
-
SHA512
90dfc9091ad808aebb58f3656627685875dbf755ace529ab871375c3f8604c0a33c994d1ae1120b1e4f78bf6584774a8b2a574af4226dcfabcfb33bb158f8275
-
SSDEEP
768:mu0tUXU83p1+Yveu9yuRTBzdSqvABYHd0IaILOnTGg:mfUXU83p1+Yveuk0zslYHd0IaILOn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a745f50ce239f8f107eceb8a3cf9cfee8f0bb98fef6b35f89e5a82e5ad92b1e9
Files
-
a745f50ce239f8f107eceb8a3cf9cfee8f0bb98fef6b35f89e5a82e5ad92b1e9.dll windows x86
52004ffe5b289136e9f620f8b56366ed
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
python310
_PyObject_LookupAttrId
PyErr_WriteUnraisable
_PyArg_UnpackKeywords
PyIter_Send
PyExc_ValueError
PyErr_Format
PyModule_AddType
_Py_FalseStruct
PyCoro_Type
PyType_IsSubtype
PyErr_Restore
PyUnicode_Join
_Py_Dealloc
PyObject_Free
PyErr_ExceptionMatches
_PyUnicode_FromId
PyModule_AddObject
PyObject_GC_Del
PyErr_Fetch
PyObject_CallFunctionObjArgs
PyObject_ClearWeakRefs
PyUnicode_FromFormat
PySet_New
PyList_New
PyModule_Create2
_PyObject_GetAttrId
PyType_Ready
PyObject_GetAttrString
PyList_Append
PyObject_RichCompareBool
PyException_SetTraceback
_PyDict_GetItemIdWithError
PyErr_SetString
PyUnicode_Type
PyObject_CallMethod
PyObject_CallFinalizerFromDealloc
_PyDict_GetItem_KnownHash
PyObject_VectorcallMethod
PyException_SetContext
PyObject_IsInstance
PyExc_StopIteration
_PyErr_ChainStackItem
PyContext_CopyCurrent
PyCMethod_New
_PyGen_SetStopIterationValue
PyObject_GC_Track
_PyType_Name
_PyObject_MakeTpCall
_Py_NewReference
_PyObject_New
PyExc_TypeError
PyObject_IsTrue
PyObject_Str
_PyLong_AsInt
PyGen_Type
_PyThreadState_GetDict
_Py_TrueStruct
_PyObject_GC_New
PyTraceBack_Type
_Py_IsFinalizing
PyThreadState_GetID
_PyDict_DelItem_KnownHash
PyUnicode_FromString
PyObject_CallNoArgs
PyArg_ParseTuple
PyLong_FromSsize_t
_Py_CheckFunctionResult
PyExc_SystemExit
_PyObject_CallMethodIdObjArgs
PyExc_AttributeError
PySet_Add
PyTuple_New
_Py_NoneStruct
PyExc_KeyboardInterrupt
PyUnicode_FromFormatV
PySet_Contains
_PyDict_SetItemId
Py_BuildValue
PyObject_Hash
PyObject_GC_UnTrack
PyExc_RuntimeError
_PyGen_FetchStopIterationValue
PyList_SetSlice
PyObject_GenericGetAttr
_PyErr_ChainExceptions
PyErr_Occurred
PyObject_SelfIter
PyErr_NormalizeException
PyImport_ImportModule
_PyErr_BadInternalCall
_PyDict_SetItem_KnownHash
PyType_GenericNew
_PyObject_SetAttrId
PyErr_GivenExceptionMatches
PyErr_SetObject
PyException_GetTraceback
PyThreadState_Get
PyDict_New
Py_GenericAlias
vcruntime140
__std_type_info_destroy_list
memset
_except_handler4_common
api-ms-win-crt-runtime-l1-1-0
_initialize_narrow_environment
_execute_onexit_table
_seh_filter_dll
_initterm_e
_initterm
_initialize_onexit_table
_cexit
_configure_narrow_argv
kernel32
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
Exports
Exports
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ