53885062c3d2698df63650035d37365f892f33d5fa3562456c29ed5518145826

Sharing

Copy URL Twitter E-mail

General

Target

53885062c3d2698df63650035d37365f892f33d5fa3562456c29ed5518145826
Size

299KB
MD5

2455006c83b7f3b1819653e133eab739
SHA1

4c0de2013c31533195cd1ed146c5cadd4b50b00f
SHA256

53885062c3d2698df63650035d37365f892f33d5fa3562456c29ed5518145826
SHA512

62b1e7d84f9cc29960808df89b2400f3a2f134b6deae6870effb64e7f915c99ca5e67b2f77cdc3d638f3124b37ce834c04d9f6ca348980027ba1d163f7b821fa
SSDEEP

6144:TrYv/6PSnVdn0Ri9nhqn+wgcmMfn8MWk1uxwWZaI:TrYvgSQRi9nhq+RMyx/ZN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53885062c3d2698df63650035d37365f892f33d5fa3562456c29ed5518145826

Files

53885062c3d2698df63650035d37365f892f33d5fa3562456c29ed5518145826
.dll windows x86

38744ba689b2d661895b0bdbbb6c929b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcessId
GetSystemTimeAsFileTime
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetCurrentThreadId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW

python311_d

PyUnicode_InternFromString
PyUnicode_Decode
PyUnicode_DecodeUTF8
PyUnicode_AsUTF8AndSize
_PyUnicode_Ready
PyLong_FromLong
PyLong_AsLong
_PyLong_AsInt
PyBool_FromLong
PyTuple_New
PyList_New
PyList_Append
PyDict_New
PyDict_GetItemWithError
PyDict_SetItem
PyDict_SetItemString
PyDict_SetDefault
PyModule_New
PyModule_GetState
PyModuleDef_Init
PyCapsule_New
_PyTraceback_Add
PyDescr_NewGetSet
PyUnicode_FromFormat
PyErr_SetString
PyErr_Occurred
PyErr_NoMemory
PyErr_Format
PyErr_NewException
Py_BuildValue
PyModule_AddObjectRef
PyModule_AddObject
PyModule_AddIntConstant
PyModule_AddStringConstant
_PyArg_BadArgument
_PyArg_UnpackKeywords
PyObject_SetAttrString
PyObject_Call
PyObject_CallFunction
PyObject_CallOneArg
_Py_RefTotal
_Py_NoneStruct
_Py_HashSecret
PyByteArray_Type
_PyByteArray_empty_string
PyExc_RuntimeError
PyExc_TypeError
PyExc_ValueError
PyUnicode_FromString
PyBytes_FromStringAndSize
PyObject_GC_Del
PyObject_GC_UnTrack
PyObject_GC_Track
_PyObject_GC_New
_PyObject_LookupAttr
_Py_Dealloc
_Py_NegativeRefcount
PyErr_SetObject
PyObject_IsTrue
PyObject_Realloc
PyObject_Free
PyObject_Malloc
PyMem_Malloc
PyMem_Free
PyObject_GetBuffer
PyBuffer_Release
PyType_FromModuleAndSpec
PyType_GetModuleState
PyType_IsSubtype
_PyImport_SetModule

vcruntime140d

__current_exception_context
__current_exception
__std_type_info_destroy_list
memset
memmove
memcmp
memcpy
strrchr
_except_handler4_common

ucrtbased

_except1
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_fdclass
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
_initialize_onexit_table
strtoul
rand_s
realloc
malloc
free
_errno
__stdio_common_vfprintf
__acrt_iob_func
_wassert
__stdio_common_vsprintf
getenv

Exports

Exports

PyInit_pyexpat

Sections

.text
Size: 245KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 270B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

38744ba689b2d661895b0bdbbb6c929b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

python311_d

vcruntime140d

ucrtbased

Exports

Exports

Sections

.text Size: 245KB - Virtual size: 244KB

.rdata Size: 29KB - Virtual size: 28KB

.data Size: 4KB - Virtual size: 5KB

.idata Size: 4KB - Virtual size: 4KB

.00cfg Size: 512B - Virtual size: 270B

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 11KB - Virtual size: 11KB

.text
Size: 245KB - Virtual size: 244KB

.rdata
Size: 29KB - Virtual size: 28KB

.data
Size: 4KB - Virtual size: 5KB

.idata
Size: 4KB - Virtual size: 4KB

.00cfg
Size: 512B - Virtual size: 270B

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 11KB - Virtual size: 11KB