9b99fe4ac8c9f5a5f742224e8e4755db0cbebaebf9f28efdf0c1e9c4e853817c

Sharing

Copy URL Twitter E-mail

General

Target

9b99fe4ac8c9f5a5f742224e8e4755db0cbebaebf9f28efdf0c1e9c4e853817c
Size

26KB
MD5

53bb41cb3e310ea95654ab6387405461
SHA1

f92228c7e2ac682b7099a35fede8ce238c2f22e1
SHA256

9b99fe4ac8c9f5a5f742224e8e4755db0cbebaebf9f28efdf0c1e9c4e853817c
SHA512

36e774314eb5230aadc35777c94b1ed38fcb0627ab8336004ea1904015838d3275c4e8ad5c13ddb89e5e569c49e71b22ca6b66f3f38ed0db499bae304d34203b
SSDEEP

384:HdRW48Tl7cVKTV5B56y+mODJFjZflUc7Z0WEDg3Pu6e0a0sj6IP9XI:9RW48Z7SKx8LDxNU80WZGft0I6IP9XI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b99fe4ac8c9f5a5f742224e8e4755db0cbebaebf9f28efdf0c1e9c4e853817c

Files

9b99fe4ac8c9f5a5f742224e8e4755db0cbebaebf9f28efdf0c1e9c4e853817c
.dll windows x86

540503f02dcd587eef9f549c863dd8ba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

python311

PyObject_CallMethod
PyMem_Free
PyCapsule_Import
_PyRuntime
PyModuleDef_Init
PyArg_ParseTupleAndKeywords
PyNumber_Add
PyObject_IsTrue
PyMem_Malloc
PyDict_New
PyUnicode_FromString
PyObject_Call
PyArg_ParseTuple
PyUnicode_FromStringAndSize
PyObject_GetIter
PyIter_Next
PyObject_CallFunction
PyErr_SetString
PyDict_SetItemString
PyTuple_New
PyTuple_Size
PyObject_RichCompareBool
PyObject_GetAttrString
PyType_Ready
PyUnicode_FromFormat
PyObject_ClearWeakRefs
PyLong_AsLong
PyObject_CallFunctionObjArgs
PyErr_Fetch
PyModule_AddObjectRef
PyTuple_GetItem
_Py_Dealloc
PyType_IsSubtype
PyTuple_Type
PyErr_Format
PyObject_CallMethodObjArgs
PyExc_ValueError
PyLong_AsLongLong
_Py_NoneStruct
PyDict_GetItemWithError
Py_BuildValue
PyLong_FromLong
PyObject_SetAttrString
_PyErr_ChainExceptions
PyObject_GenericGetAttr
PyErr_Occurred
PyBytes_AsString
PyImport_ImportModule
PyLong_AsSsize_t
PyDict_SetDefault
PyExc_TypeError
PyMem_Calloc

vcruntime140

__std_type_info_destroy_list
memset
_except_handler4_common
memcpy

api-ms-win-crt-string-l1-1-0

isalpha
isdigit

api-ms-win-crt-runtime-l1-1-0

_cexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm

kernel32

IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter

Exports

Exports

PyInit__zoneinfo

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

540503f02dcd587eef9f549c863dd8ba

Headers

DLL Characteristics

File Characteristics

Imports

python311

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 14KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 14KB - Virtual size: 14KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1KB - Virtual size: 1KB