PyInit__asyncio
Static task
static1
Behavioral task
behavioral1
Sample
1aa842788a05ae9e3a6ebb11339b9c520fac7f3f8786d142b419db9878830d37.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
1aa842788a05ae9e3a6ebb11339b9c520fac7f3f8786d142b419db9878830d37.dll
Resource
win10v2004-20230703-en
General
-
Target
1aa842788a05ae9e3a6ebb11339b9c520fac7f3f8786d142b419db9878830d37
-
Size
109KB
-
MD5
0220b3e8d4c4b83f54befccbc3ddb303
-
SHA1
9cc1253d4ab705d414ed832b7242c95f402d24a9
-
SHA256
1aa842788a05ae9e3a6ebb11339b9c520fac7f3f8786d142b419db9878830d37
-
SHA512
a06464d145d087b28cb22fd7411b33bb9c868c3b6ad61944cb03016139a9853040a532501b825e92f7d6ed6998ab2d9c8f14bb81df2d9048d171a31cb684979d
-
SSDEEP
3072:OyFMvzQZULQWV/b3fsdN8ZFVflrtoNGf02YNbfRdQFghP3k0Z1xEIP0Kn:OgMbQW5/bk0ck0Px
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1aa842788a05ae9e3a6ebb11339b9c520fac7f3f8786d142b419db9878830d37
Files
-
1aa842788a05ae9e3a6ebb11339b9c520fac7f3f8786d142b419db9878830d37.dll windows x86
91a70ddb853b8d814e2ec08684e0d99b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
python311_d
_PyObject_New
_PyObject_GC_New
PyObject_GC_Track
PyObject_GC_UnTrack
PyObject_GC_Del
PyUnicode_FromString
PyUnicode_FromFormatV
PyUnicode_FromFormat
_PyUnicode_FromId
PyLong_FromLong
PyLong_FromSsize_t
_PyLong_AsInt
PyTuple_New
PyList_New
PyList_Append
PyList_SetSlice
PyDict_New
_PyDict_GetItem_KnownHash
_PyDict_GetItemIdWithError
_PyDict_SetItem_KnownHash
_PyDict_DelItem_KnownHash
_PyDict_SetItemId
PySet_New
PySet_Add
PySet_Contains
PyCMethod_New
PyThreadState_GetID
_PyThreadState_GetDict
_PyGen_SetStopIterationValue
_PyGen_FetchStopIterationValue
PyErr_SetObject
PyErr_SetString
PyErr_Occurred
PyErr_Fetch
PyErr_Restore
PyErr_GivenExceptionMatches
PyErr_ExceptionMatches
PyErr_NormalizeException
PyException_SetTraceback
PyException_GetTraceback
PyObject_Free
_PyErr_BadInternalCall
PyErr_WriteUnraisable
_PyErr_ChainExceptions
_Py_FatalErrorFunc
PyContext_CopyCurrent
Py_BuildValue
PyModule_AddObject
PyModule_AddType
PyModule_Create2
_PyArg_CheckPositional
_PyArg_UnpackKeywords
_Py_IsFinalizing
PyImport_ImportModule
PyObject_CallNoArgs
PyObject_CallMethod
PyObject_CallFunctionObjArgs
PyIter_Send
PyObject_IsInstance
PyObject_Vectorcall
PyObject_CallOneArg
PyObject_VectorcallMethod
_PyObject_CallMethodIdObjArgs
_Py_RefTotal
_Py_NoneStruct
PyUnicode_Type
_Py_FalseStruct
_Py_TrueStruct
PySet_Type
PyFrozenSet_Type
PyTraceBack_Type
PyGen_Type
PyCoro_Type
PyExc_StopIteration
PyExc_AttributeError
PyExc_KeyboardInterrupt
PyExc_RuntimeError
PyExc_SystemExit
PyExc_TypeError
PyExc_ValueError
_PyRuntime
_Py_Dealloc
PyObject_CallFinalizerFromDealloc
_PyObject_LookupAttrId
_PyObject_SetAttrId
_PyObject_GetAttrId
_Py_NewReference
_PyType_Name
_Py_NegativeRefcount
PyObject_ClearWeakRefs
PyObject_IsTrue
PyObject_Hash
PyObject_GetAttrString
PyObject_RichCompareBool
PyObject_Str
PyType_Ready
PyType_IsSubtype
Py_GenericAlias
PyType_GenericNew
PyObject_SelfIter
PyErr_Format
PyObject_GenericGetAttr
vcruntime140d
memset
__current_exception_context
__current_exception
__std_type_info_destroy_list
_except_handler4_common
ucrtbased
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
terminate
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_wassert
_initialize_onexit_table
kernel32
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
Exports
Exports
Sections
.text Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: 512B - Virtual size: 270B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ