01126f90981db0b7f910aaafc05bd14c7cdfc52b9f7927fb2dc5997fcecab0f0

Sharing

Copy URL Twitter E-mail

General

Target

01126f90981db0b7f910aaafc05bd14c7cdfc52b9f7927fb2dc5997fcecab0f0
Size

39KB
MD5

ae855f24011d6276f9c0bbc700714125
SHA1

7e2a2e8c6136700f3870943f914dea034463074a
SHA256

01126f90981db0b7f910aaafc05bd14c7cdfc52b9f7927fb2dc5997fcecab0f0
SHA512

acb8f48ccde51ba341e4af8f99c3502529c9b48257b996a97bae3c10d78de2bf961c38b504dbf26705fbcf9d512392880f4f2db090c1899e392cc432542a3884
SSDEEP

768:YHDRbyb0iZwdgBOB1qMB3fsdNMNUflDw0IpIPODL:0DVxi+dg8YMB3fsdNMNUflDw0IpIPOD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01126f90981db0b7f910aaafc05bd14c7cdfc52b9f7927fb2dc5997fcecab0f0

Files

01126f90981db0b7f910aaafc05bd14c7cdfc52b9f7927fb2dc5997fcecab0f0
.dll windows x86

050567e138294dad55b8e563e5f4dcc4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

WSAGetLastError
select
__WSAFDIsSet

python311_d

PyEval_SaveThread
PyEval_RestoreThread
PySequence_Fast
_Py_RefTotal
_Py_NoneStruct
PyExc_OSError
_PyArg_CheckPositional
PyExc_ValueError
PyModule_AddObjectRef
PyErr_Occurred
PyErr_SetString
_PyDeadline_Get
_PyDeadline_Init
_PyTime_AsTimeval_clamp
PyErr_CheckSignals
PyErr_SetExcFromWindowsErr
PyExc_TypeError
_Py_NegativeRefcount
_Py_Dealloc
PyUnicode_InternFromString
PyErr_ExceptionMatches
PyTuple_Pack
PyList_New
PyList_SetItem
PyModule_GetState
PyModuleDef_Init
PyObject_AsFileDescriptor
_PyTime_FromSecondsObject
_PyTime_AsTimeval

vcruntime140d

_except_handler4_common
memset
__current_exception_context
__current_exception
__std_type_info_destroy_list

ucrtbased

terminate
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_wassert
_errno
_initialize_narrow_environment

kernel32

GetCurrentThreadId
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
UnhandledExceptionFilter
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter

Exports

Exports

PyInit_select

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 270B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

050567e138294dad55b8e563e5f4dcc4

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

python311_d

vcruntime140d

ucrtbased

kernel32

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 20KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 1KB

.idata Size: 3KB - Virtual size: 2KB

.00cfg Size: 512B - Virtual size: 270B

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 20KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 1KB

.idata
Size: 3KB - Virtual size: 2KB

.00cfg
Size: 512B - Virtual size: 270B

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 1KB - Virtual size: 1KB