PyInit__message
Static task
static1
Behavioral task
behavioral1
Sample
b8f366eea8a6cd2e570e3a3941b98d3fa9cb0e8f8e16008676df70c978c41a07.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
b8f366eea8a6cd2e570e3a3941b98d3fa9cb0e8f8e16008676df70c978c41a07.dll
Resource
win10v2004-20230703-en
General
-
Target
b8f366eea8a6cd2e570e3a3941b98d3fa9cb0e8f8e16008676df70c978c41a07
-
Size
631KB
-
MD5
5d370d593ccc6611a873db217933d4e0
-
SHA1
b3033d9faf141e998ec316b8320b6c1e66e3375f
-
SHA256
b8f366eea8a6cd2e570e3a3941b98d3fa9cb0e8f8e16008676df70c978c41a07
-
SHA512
2fbb76025df959d3fd61c8329123dd27772a808fa46b8b0ed39290671cacf48059f7b0f962f13d7d1b51731bd5e8a30d2a9aef625dd58917569fa48c36607f6d
-
SSDEEP
12288:XPgTRWqpnOqKh/gGRe5M9EOwzvOCER2JdP0IXeI:XPgIqpnOqKZRQ5M9pwzvOCER2J90Ip
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8f366eea8a6cd2e570e3a3941b98d3fa9cb0e8f8e16008676df70c978c41a07
Files
-
b8f366eea8a6cd2e570e3a3941b98d3fa9cb0e8f8e16008676df70c978c41a07.dll windows x86
27715483265db727bbb8d22d1ec987e4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
_amsg_exit
_errno
_initterm
_iob
_lock
_setjmp3
_unlock
_vscprintf
_vsnprintf
_vsnprintf_s
abort
calloc
fprintf
free
fwrite
islower
isprint
isspace
isupper
localeconv
malloc
memcmp
memcpy
memmove
memset
qsort
realloc
strcmp
strcpy
strlen
strncmp
strncpy
strrchr
strtol
strtoul
toupper
vfprintf
longjmp
python38
PyIter_Next
PyObject_GetIter
PySequence_Fast
PySequence_GetItem
PySequence_Size
PyNumber_AsSsize_t
PyNumber_Index
PyObject_GetItem
PyObject_Size
PyBool_Type
_Py_FalseStruct
_Py_TrueStruct
PyBool_FromLong
PyBytes_FromObject
PyBytes_AsStringAndSize
PyBytes_AsString
PyBytes_Size
PyBytes_FromFormat
PyBytes_FromStringAndSize
PyObject_CallFunctionObjArgs
PyObject_CallMethod
PyObject_CallFunction
PyObject_CallObject
PyObject_Call
PyDict_Type
PyDict_DelItemString
PyDict_SetItemString
PyDict_GetItemString
PyDict_Merge
PyDict_Next
PyDict_SetItem
PyDict_New
PyExc_KeyError
PyExc_RuntimeError
PyExc_MemoryError
PyExc_AttributeError
PyExc_ValueError
PyExc_NotImplementedError
PyExc_TypeError
PyExc_IndexError
PyExc_SystemError
PyFloat_AsDouble
PyFloat_FromDouble
PyList_Append
PyList_SetItem
PyList_GetItem
PyList_Size
PyList_New
PyLong_AsUnsignedLongLong
PyLong_AsLongLong
PyLong_FromSize_t
PyLong_FromSsize_t
PyLong_FromUnsignedLongLong
PyLong_FromLongLong
PyLong_AsLong
PyLong_FromLong
PyMemoryView_Type
PyModule_GetState
PyModule_Create2
_Py_NoneStruct
_Py_NotImplementedStruct
_Py_Dealloc
PyObject_IsTrue
PyObject_GenericGetAttr
PyObject_SelfIter
PyObject_SetAttr
PyObject_SetAttrString
PyObject_GetAttrString
PyObject_Hash
PyObject_HashNotImplemented
PyObject_RichCompareBool
PyObject_RichCompare
PyObject_Str
PyObject_Repr
PySlice_Type
PySlice_AdjustIndices
PySlice_Unpack
PySlice_New
PyTuple_Type
PyTuple_Pack
PyTuple_SetItem
PyTuple_GetItem
PyTuple_Size
PyTuple_New
PyType_Type
PyType_GetSlot
PyType_FromSpec
PyType_FromSpecWithBases
PyType_IsSubtype
PyType_GenericAlloc
PyUnicode_InternFromString
PyUnicode_Join
PyUnicode_DecodeUTF8
PyUnicode_AsUTF8AndSize
PyUnicode_FromEncodedObject
PyUnicode_FromFormat
PyUnicode_FromString
PyUnicode_FromStringAndSize
PyErr_Format
PyErr_Clear
PyErr_ExceptionMatches
PyErr_Occurred
PyErr_SetString
PyErr_SetNone
PyErr_SetObject
PyArg_UnpackTuple
PyArg_ParseTupleAndKeywords
PyArg_ParseTuple
PyImport_ImportModule
PyModule_AddIntConstant
PyModule_AddObject
Py_BuildValue
PyState_FindModule
Exports
Exports
Sections
.text Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/4 Size: 1024B - Virtual size: 968B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/19 Size: 236KB - Virtual size: 235KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/31 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/45 Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/57 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/70 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/81 Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/92 Size: 1024B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ