a592a6e0a066ff97bf97a7f340ab5684fab7894a16f96d250752f53d811f016d

Sharing

Copy URL Twitter E-mail

General

Target

a592a6e0a066ff97bf97a7f340ab5684fab7894a16f96d250752f53d811f016d
Size

17KB
MD5

63b9ad91714f99c754ad556584e7d7c0
SHA1

c444f1ac8a3e2287848268be932ea81b0f974fbc
SHA256

a592a6e0a066ff97bf97a7f340ab5684fab7894a16f96d250752f53d811f016d
SHA512

d29c2c0245e7ea01cf387771d4108212af35f0d0a2ada65f7fbcd1461f2a7cc3aec67b458dd05335918411a85a7370e13a2379f3631f929336547125e87b0596
SSDEEP

384:mLwTEdONI2DJbjCwVbND7AnZXq6sCKTYCa0sjKIPWBLV:aH2Dwwj05NGYH0IKIPWt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a592a6e0a066ff97bf97a7f340ab5684fab7894a16f96d250752f53d811f016d

Files

a592a6e0a066ff97bf97a7f340ab5684fab7894a16f96d250752f53d811f016d
.dll windows x86

11f236912886d88b9f87e774678d7a3b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

recv
closesocket
send
WSAGetLastError

kernel32

GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
SetLastError
ReleaseSemaphore
WaitForMultipleObjectsEx
GetCurrentThreadId
GetLastError
WaitForSingleObjectEx
CloseHandle
ResetEvent
CreateSemaphoreA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcessId
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime

python311

PyThread_get_thread_ident
PyMem_Malloc
_PyLong_AsInt
_Py_TrueStruct
PyExc_AssertionError
_PyOS_IsMainThread
_PyOS_SigintEvent
PyModuleDef_Init
_PyArg_ParseStack_SizeT
PyExc_OSError
PyErr_NoMemory
PyDict_New
_PyBytes_Resize
PyMem_Free
PyErr_SetExcFromWindowsErr
PyExc_OverflowError
PyBytes_FromStringAndSize
_Py_FalseStruct
_PyArg_UnpackKeywords
PyFloat_AsDouble
PyErr_SetFromWindowsErr
PyErr_Occurred
_PyArg_CheckPositional
PyBool_FromLong
PyEval_RestoreThread
PyBuffer_Release
_PyArg_Parse_SizeT
PyModule_AddObject
_Py_Dealloc
PyModule_AddType
PyErr_Format
PyExc_ValueError
PyErr_SetString
_PyArg_BadArgument
PyDict_SetItemString
_Py_NoneStruct
PyLong_FromLong
PyExc_RuntimeError
PyEval_SaveThread
PyUnicode_AsUTF8AndSize
PyErr_SetFromErrno

vcruntime140

memset
_except_handler4_common
__std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

_initterm
_cexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_errno

Exports

Exports

PyInit__multiprocessing

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

11f236912886d88b9f87e774678d7a3b

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

python311

vcruntime140

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 1024B - Virtual size: 784B

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1024B - Virtual size: 784B