a1639cd6052e8778e957ec07c6fc56acb1cc3268d634fb02ab83c2ca073ba13a

Sharing

Copy URL Twitter E-mail

General

Target

a1639cd6052e8778e957ec07c6fc56acb1cc3268d634fb02ab83c2ca073ba13a
Size

15KB
MD5

c12f30f5fd883639c0b9535b7d0cd6eb
SHA1

ec7b876fc9c8efb306cc8891a707917216b0d54e
SHA256

a1639cd6052e8778e957ec07c6fc56acb1cc3268d634fb02ab83c2ca073ba13a
SHA512

031f0dbf1c8f3a69e009a5b6ff660b26d41b4f7855587621681de494687bd42dda36d03f620ff6acfedd0c30d381d0688193f82c03378afe4ac1c3157635a39b
SSDEEP

384:/MpecPcHM7fAJ20j2onqQJ07A4ZxhEa0sjOIPQGf:u8MrAIynq1Zf90IOIPQGf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1639cd6052e8778e957ec07c6fc56acb1cc3268d634fb02ab83c2ca073ba13a

Files

a1639cd6052e8778e957ec07c6fc56acb1cc3268d634fb02ab83c2ca073ba13a
.dll windows x86

972dc7ad301658c936a457b1d39be59a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

select
__WSAFDIsSet
WSAGetLastError

python311

PyList_New
PyObject_AsFileDescriptor
PyExc_OSError
PyErr_CheckSignals
_PyDeadline_Get
PyEval_RestoreThread
_PyTime_AsTimeval
_PyDeadline_Init
PyErr_SetExcFromWindowsErr
PyList_SetItem
PyModule_GetState
_PyTime_AsTimeval_clamp
PySequence_Fast
PyModule_AddObjectRef
PyErr_ExceptionMatches
_Py_Dealloc
PyExc_ValueError
PyErr_SetString
_Py_NoneStruct
PyEval_SaveThread
PyErr_Occurred
_PyArg_CheckPositional
_PyTime_FromSecondsObject
PyUnicode_InternFromString
PyTuple_Pack
PyExc_TypeError
PyModuleDef_Init

vcruntime140

_except_handler4_common
memset
__std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_cexit
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_errno

kernel32

GetCurrentThreadId
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
UnhandledExceptionFilter
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter

Exports

Exports

PyInit_select

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

972dc7ad301658c936a457b1d39be59a

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

python311

vcruntime140

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 1012B

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 492B

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 1012B

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 492B