da8da10e2dc2abfd43ed45cab293d93d3dfe8581f1232ce7cc31a51469f148c1

Sharing

Copy URL Twitter E-mail

General

Target

da8da10e2dc2abfd43ed45cab293d93d3dfe8581f1232ce7cc31a51469f148c1
Size

18KB
MD5

a2d2707da2a298a6d76890a8a8d0040f
SHA1

25825f3fa5711b77a7e07371e5d6c73799e7b229
SHA256

da8da10e2dc2abfd43ed45cab293d93d3dfe8581f1232ce7cc31a51469f148c1
SHA512

d90ea1d8084f42166c96d5a5e3922ba28bb540418817aa8e5f2e68b0dd6b9f505943b67d2fdb22821b01a24578e9823783907fbd57ea7cac95f08815e90e49de
SSDEEP

384:ekQaVoXSX9u6DG0M/f2GATu29YIcLkBJzj2cGQ3e7+iEjDCOigLndU+7AXSae/hv:ekQaVoXSX9u6DG0M/f25CIfBdOB+YeJZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da8da10e2dc2abfd43ed45cab293d93d3dfe8581f1232ce7cc31a51469f148c1

Files

da8da10e2dc2abfd43ed45cab293d93d3dfe8581f1232ce7cc31a51469f148c1
.dll windows x86

a45b7aab209e6042e478ea8ece753f89

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

python311

_Py_Get_Getpath_CodeObject
_Py_hashtable_set
_Py_EncodeLocaleEx
PyExc_TypeError
_PyPathConfig_ClearGlobal
PyErr_SetString
_Py_GetErrorHandler
PyInterpreterState_Get
PyUnicode_FromString
_Py_DecodeLocaleEx
_Py_UTF8_Edit_Cost
_Py_hashtable_get
_PyInterpreterState_GetConfigCopy
PyExc_ValueError
_PyRuntime
_Py_normpath
PyErr_NoMemory
_PyEval_EvalFrameDefault
PyConfig_Clear
PyMem_Free
_Py_hashtable_new
PyList_Append
PyConfig_InitIsolatedConfig
PyModule_Create2
PyUnicode_AsWideCharString
_PyInterpreterState_SetConfig
_PyArg_ParseTuple_SizeT
PyModule_AddObject
_Py_hashtable_clear
_Py_Dealloc
PyErr_Format
_Py_hashtable_destroy
PyMem_RawFree
_Py_hashtable_steal
PyUnicode_FromWideChar
_PyInterpreterState_SetEvalFrameFunc
_Py_hashtable_compare_direct
_Py_hashtable_foreach
_Py_NoneStruct
_PyConfig_AsDict
PyBytes_FromString
PyLong_FromLong
PyExc_RuntimeError
PyLong_FromSsize_t
_Py_GetConfigsAsDict
PyExc_AssertionError
_PyConfig_FromDict

vcruntime140

__std_type_info_destroy_list
memset
_except_handler4_common

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_initialize_narrow_environment
_seh_filter_dll
_initterm_e
_initterm
_wassert
_execute_onexit_table
_cexit
_configure_narrow_argv

kernel32

IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter

Exports

Exports

PyInit__testinternalcapi

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 820B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a45b7aab209e6042e478ea8ece753f89

Headers

DLL Characteristics

File Characteristics

Imports

python311

vcruntime140

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 1024B - Virtual size: 820B

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1024B - Virtual size: 820B