PyInit__asyncio
Static task
static1
Behavioral task
behavioral1
Sample
d99311a1c32d6e2abeeb7c2f907d4c479433eedf63b773191265c38ce0eb6375.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
d99311a1c32d6e2abeeb7c2f907d4c479433eedf63b773191265c38ce0eb6375.dll
Resource
win10v2004-20230703-en
General
-
Target
d99311a1c32d6e2abeeb7c2f907d4c479433eedf63b773191265c38ce0eb6375
-
Size
44KB
-
MD5
d7a3f41e33a53d4cc5d52aa3e8069c31
-
SHA1
811bed0ec52d07223fa4d61d62712bc446c5a43a
-
SHA256
d99311a1c32d6e2abeeb7c2f907d4c479433eedf63b773191265c38ce0eb6375
-
SHA512
403bc215663d8dafba7199263f43620e22fe43fb9b63d1474faac21fd3aad35d6328be27cbfe5480267a0faf5b2fa054eddca5340aa88370fd9acc90b4e63709
-
SSDEEP
768:UavUsUnSb0j+QfQEkBc6qa0+7gPna0I6IPOn6tl:UAUsUnSgj+w6xX7gPa0I6IPOnml
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d99311a1c32d6e2abeeb7c2f907d4c479433eedf63b773191265c38ce0eb6375
Files
-
d99311a1c32d6e2abeeb7c2f907d4c479433eedf63b773191265c38ce0eb6375.dll windows x86
c2c8c4905d690d14988fbb945dc02b35
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
python311
PyErr_SetString
_PyObject_LookupAttrId
PyErr_WriteUnraisable
_PyArg_UnpackKeywords
PyIter_Send
PyExc_ValueError
PyErr_Format
PyModule_AddType
_Py_FalseStruct
PyCoro_Type
PyType_IsSubtype
PyErr_Restore
_Py_Dealloc
PyObject_Free
PyErr_ExceptionMatches
_PyUnicode_FromId
PyModule_AddObject
PyObject_GC_Del
PyErr_Fetch
PyObject_CallFunctionObjArgs
PyObject_ClearWeakRefs
PyObject_Vectorcall
PyUnicode_FromFormat
PySet_New
PyList_New
PyModule_Create2
_PyObject_GetAttrId
PyType_Ready
PyObject_GetAttrString
PyList_Append
PyObject_RichCompareBool
PyExc_SystemExit
_PyDict_GetItemIdWithError
PyDict_New
PyUnicode_Type
PyObject_CallMethod
PyObject_CallFinalizerFromDealloc
_PyDict_GetItem_KnownHash
PyObject_VectorcallMethod
PyObject_IsInstance
PyExc_StopIteration
PyContext_CopyCurrent
PyCMethod_New
_PyGen_SetStopIterationValue
_PyRuntime
PyObject_GC_Track
_PyType_Name
_Py_NewReference
_PyObject_New
PyExc_TypeError
PyObject_IsTrue
PyObject_Str
_PyLong_AsInt
PyGen_Type
_PyThreadState_GetDict
_Py_TrueStruct
_PyObject_GC_New
PyTraceBack_Type
_Py_IsFinalizing
PyThreadState_GetID
_PyDict_DelItem_KnownHash
PyUnicode_FromString
PyObject_CallNoArgs
PyErr_Occurred
_PyObject_CallMethodIdObjArgs
PyExc_AttributeError
PySet_Add
PyTuple_New
_Py_NoneStruct
PyExc_KeyboardInterrupt
PyUnicode_FromFormatV
PySet_Contains
_PyDict_SetItemId
Py_BuildValue
PyObject_Hash
PyObject_GC_UnTrack
PyLong_FromLong
PyExc_RuntimeError
_PyGen_FetchStopIterationValue
PyList_SetSlice
_PyErr_ChainExceptions
PyLong_FromSsize_t
PyObject_GenericGetAttr
PyObject_SelfIter
PyErr_NormalizeException
PyImport_ImportModule
_PyErr_BadInternalCall
_PyDict_SetItem_KnownHash
_PyArg_CheckPositional
PyType_GenericNew
_PyObject_SetAttrId
PyErr_GivenExceptionMatches
PyObject_CallOneArg
PyErr_SetObject
PyException_GetTraceback
PyException_SetTraceback
Py_GenericAlias
vcruntime140
__std_type_info_destroy_list
memset
_except_handler4_common
api-ms-win-crt-runtime-l1-1-0
_initialize_narrow_environment
_execute_onexit_table
_seh_filter_dll
_initterm_e
_initterm
_initialize_onexit_table
_cexit
_configure_narrow_argv
kernel32
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
Exports
Exports
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ