50fbb14dc336ebeab1163b3444ebe14e5ef4e6e222f2c8ac0aeaa6cf5f586914

Sharing

Copy URL Twitter E-mail

General

Target

50fbb14dc336ebeab1163b3444ebe14e5ef4e6e222f2c8ac0aeaa6cf5f586914
Size

101KB
MD5

1b19efdef740faf3097adb09af9794a2
SHA1

0213281caa06d9488842985c4f9e638999877860
SHA256

50fbb14dc336ebeab1163b3444ebe14e5ef4e6e222f2c8ac0aeaa6cf5f586914
SHA512

748ed6c153c9846f4f5bb7b32e4f2408f68f9f07902d2b0bd146045f0388f2133aa3d1882bbdccf25e17260265e1a3131536b456bef0b90c48a5d493606642d9
SSDEEP

3072:69zWv8UMB0wQ+AVWzVwx+zXE8M+vR+AJZD3dwNXIP6fn02:62AzMx+VgSF3dwN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50fbb14dc336ebeab1163b3444ebe14e5ef4e6e222f2c8ac0aeaa6cf5f586914

Files

50fbb14dc336ebeab1163b3444ebe14e5ef4e6e222f2c8ac0aeaa6cf5f586914
.dll windows x86

e01dc7b668797e5e4cd0911a334d41ee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetCurrentThreadId
QueryPerformanceCounter
IsProcessorFeaturePresent

python311

PyType_IsSubtype
PyUnicode_Join
_Py_Dealloc
_PyTrash_cond
PyObject_Free
PyErr_ExceptionMatches
_PyUnicode_FromId
PyModule_AddObject
_PyArg_ParseTuple_SizeT
PyObject_GC_Del
PyObject_CallFunctionObjArgs
_PyBytes_Resize
PyObject_ClearWeakRefs
PyUnicode_AsUTF8
PyUnicode_FromFormat
PyObject_GetBuffer
PySequence_Fast
PyList_New
PyModule_Create2
_PyObject_GetAttrId
PyType_Ready
PyExc_SyntaxError
PyObject_GetAttrString
PyErr_NewException
PyErr_Clear
PyList_Append
PyBytes_Type
PyObject_RichCompareBool
PyDict_SetItem
PyDict_New
PyUnicode_Type
PyObject_GC_UnTrack
PyMem_Free
PyExc_StopIteration
PyType_GenericAlloc
PyCapsule_Import
PyList_Type
PyErr_NoMemory
PyObject_Realloc
PyModule_AddType
PyObject_GC_Track
PyBytes_FromStringAndSize
Py_ReprLeave
PyDict_DelItem
PyNumber_AsSsize_t
Py_ReprEnter
PyExc_TypeError
PyMem_Realloc
PyObject_IsTrue
PyDict_Copy
PyTuple_Pack
_PyUnicode_Ready
PyCallable_Check
PyMem_Malloc
PyExc_IndexError
PyExc_ImportError
PyState_FindModule
PyModule_GetState
_PyTrash_begin
_PyObject_GC_New
PyList_SetItem
PyDict_Keys
PyUnicode_FromString
PyBuffer_Release
PyObject_CallNoArgs
PyUnicode_FromStringAndSize
PyUnicode_AsEncodedString
PySlice_Unpack
PyLong_FromLong
PyObject_SetAttrString
_PyObject_FastCall
PyExc_RuntimeError
PyList_SetSlice
PyDict_Type
PyErr_Format
PyUnicode_AsUTF8AndSize
PyObject_GenericGetAttr
_PyArg_ParseTupleAndKeywords_SizeT
PyDict_Next
PyExc_ValueError
PyUnicode_DecodeUTF8
PyLong_FromSsize_t
PyErr_Occurred
_PyArg_UnpackKeywords
_PyTrash_end
PyNumber_Add
_PyObject_LookupAttrId
PyErr_SetString
_PyArg_BadArgument
PyUnicode_New
_PyObject_CallMethodIdObjArgs
PyExc_AttributeError
PyDict_Items
_Py_HashSecret
PyTuple_New
_Py_NoneStruct
PyDict_GetItemWithError
PyDict_Update
PyObject_SelfIter
PyIndex_Check
PyErr_SetNone
PyImport_ImportModule
PySlice_Type
_PyArg_CheckPositional
PyLong_AsSsize_t
PyExc_RuntimeWarning
PyErr_WarnEx
PyObject_Malloc
_PyObject_SetAttrId
_PyObject_CallFunction_SizeT
_PyNumber_Index
_Py_BuildValue_SizeT
PyObject_CallOneArg
PyErr_SetObject
PySlice_AdjustIndices
PyThreadState_Get
PyObject_VectorcallMethod

vcruntime140

memmove
memcpy
memset
_except_handler4_common
__std_type_info_destroy_list

api-ms-win-crt-string-l1-1-0

strncat

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_initterm
_cexit
_execute_onexit_table
_initialize_onexit_table
_seh_filter_dll
_configure_narrow_argv
_initterm_e

Exports

Exports

PyInit__elementtree

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e01dc7b668797e5e4cd0911a334d41ee

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

python311

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 71KB - Virtual size: 71KB

.rdata Size: 17KB - Virtual size: 17KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 71KB - Virtual size: 71KB

.rdata
Size: 17KB - Virtual size: 17KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 6KB - Virtual size: 6KB