1878dcb96fab72d37ac4cfa290b578a2

Sharing

Copy URL

Twitter E-mail

General

Target

1878dcb96fab72d37ac4cfa290b578a2
Size

452KB
MD5

1878dcb96fab72d37ac4cfa290b578a2
SHA1

14f348357af8e11f5b759631c98c7816e6f7e292
SHA256

39ebf996ee711ba43b36772c745f82eb32e9cd70f85c31ce547dd9f0d52ddb50
SHA512

30156519624b982867c2aac8aee7a71d0206b6bba312e7fd1142d5be228ca7eaeca7c902ca2fe84bef96452d8f23eb4fbc165291a80f4638949c475036f72ff3
SSDEEP

12288:OcFGNgk8c6elKiks8hEkpdYxx7W0fllchLMT:OcE6elkZExE0fl+w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1878dcb96fab72d37ac4cfa290b578a2

Files

1878dcb96fab72d37ac4cfa290b578a2
.dll windows:5 windows x86 arch:x86

53a001f27d08e499b095241bcd7347a7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

oleaut32

SysAllocString
SetErrorInfo
CreateErrorInfo
SysFreeString
GetErrorInfo
VariantClear
VariantInit
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetDim
SafeArrayUnaccessData
SafeArrayAccessData
GetRecordInfoFromTypeInfo
GetActiveObject
RegisterActiveObject
RevokeActiveObject
CreateTypeLi
CreateTypeLib2
LoadTypeLi
LoadRegTypeLi
RegisterTypeLi
UnRegisterTypeLi
QueryPathOfRegTypeLi
LHashValOfNameSys
VariantChangeType
SafeArrayGetElement
VariantCopyInd
SafeArrayPutElement
SafeArrayDestroy
SysStringLen
SafeArrayCreate
SysAllocStringLen

ole32

StringFromGUID2
CoTaskMemAlloc
PropVariantClear
CoUninitialize
CoInitialize
OleInitialize
DoDragDrop
RevokeDragDrop
RegisterDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
OleGetClipboard
OleSaveToStream
OleLoadFromStream
OleLoad
CoGetObject
CoReleaseMarshalData
CoUnmarshalInterface
CoMarshalInterface
CoCreateFreeThreadedMarshaler
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
GetRunningObjectTable
CoFreeUnusedLibraries
GetClassFile
CreateItemMoniker
CreateFileMoniker
CreatePointerMoniker
CreateBindCtx
MkParseDisplayName
ProgIDFromCLSID
CoTaskMemFree
CoCreateGuid
CoTreatAsClass
CoResumeClassObjects
CoRevokeClassObject
CoRegisterClassObject
CoCreateInstance
StgOpenStorage
StgIsStorageFile
StgCreateDocfileOnILockBytes
StgCreateDocfile
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
WriteClassStm
ReadClassStm
WriteClassStg
ReadClassStg
ReleaseStgMedium

user32

PeekMessageA
PostThreadMessageA
GetMessageA
wsprintfA
DispatchMessageA
TranslateMessage

python26

PyList_New
PyObject_RichCompareBool
PyString_ConcatAndDel
PyObject_Repr
PyString_Concat
PyExc_NotImplementedError
PySequence_GetItem
PyExc_PendingDeprecationWarning
_Py_ZeroStruct
_Py_TrueStruct
Py_FrozenFlag
PyErr_NewException
PyType_Ready
Py_InitModule4
PyDict_SetItem
PyLong_FromVoidPtr
PyMapping_HasKey
PyEval_InitThreads
PySys_SetObject
PyList_Append
Py_Initialize
Py_IsInitialized
PyRun_SimpleFileExFlags
PySys_SetArgv
PyExc_IndexError
PyObject_GenericSetAttr
PyArg_Parse
PySequence_Tuple
_PyString_Resize
PyLong_FromUnsignedLong
PyString_Size
PyFloat_FromDouble
PyFloat_AsDouble
PyModule_GetDict
PyFloat_Type
PyObject_AsReadBuffer
PyInt_AsSsize_t
PyInt_FromSsize_t
PyBuffer_Type
PyLong_FromLong
PyBuffer_New
PyNumber_Float
PyObject_Str
PyObject_HasAttrString
PyLong_AsDouble
PyExc_OverflowError
PyEval_CallObjectWithKeywords
PyCObject_AsVoidPtr
PyCObject_Type
PyCObject_FromVoidPtr
PyLong_FromLongLong
PyLong_FromUnsignedLongLong
PyLong_AsUnsignedLongLong
PyLong_Type
PyLong_AsUnsignedLong
PyDict_GetItemString
PyString_FromStringAndSize
PyErr_WarnEx
PyMem_Free
PyMem_Malloc
PyErr_NoMemory
PyUnicode_EncodeMBCS
PyString_FromString
PyErr_ExceptionMatches
_Py_NotImplementedStruct
PyBool_FromLong
PyString_AsString
Py_VaBuildValue
PyExc_AttributeError
PyObject_CallFunction
PyNumber_Check
PyTuple_GetItem
PySequence_Check
PyObject_Size
PyTuple_SetItem
PyLong_FromDouble
PyLong_AsVoidPtr
PyObject_IsInstance
PyArg_ParseTupleAndKeywords
PyExc_ValueError
PyDict_GetItem
PyTuple_Size
PyLong_AsLong
PyNumber_Long
PyLong_AsLongLong
PyObject_GenericGetAttr
PyTuple_New
PySeqIter_New
PySequence_Size
PyExc_StopIteration
PyErr_SetNone
PyObject_IsSubclass
PyType_Type
PyErr_Occurred
PyInt_FromLong
PyErr_SetObject
PyObject_CallMethod
PyImport_ImportModule
PyErr_NormalizeException
PyDict_New
Py_BuildValue
PyDict_SetItemString
PyObject_Call
PyArg_ParseTuple
PyExc_RuntimeError
PyObject_GetAttrString
_Py_NoneStruct
PyErr_Clear
PyNumber_Int
PyInt_AsLong
PyExc_MemoryError
PyErr_SetString
PyGILState_Release
PyGILState_Ensure
PyErr_Print
PyErr_Fetch
PySys_GetObject
PyFile_WriteString
PyErr_Restore
PyEval_SaveThread
PyEval_RestoreThread
PyErr_GivenExceptionMatches
PyExc_TypeError
PyType_IsSubtype
PyErr_Format

pywintypes26

?PyWinObject_AsDATE@@YAHPAU_object@@PAN@Z
?PyWinObject_AsWriteBuffer@@YAHPAU_object@@PAPAXPAKH@Z
?PyWinObject_AsLARGE_INTEGER@@YAHPAU_object@@PAT_LARGE_INTEGER@@@Z
?PyWinObject_AsWCHARArray@@YAHPAU_object@@PAPAPA_WPAKH@Z
?PyWinObject_FreeWCHARArray@@YAXPAPA_WK@Z
?PyWinObject_AsDWORDArray@@YAHPAU_object@@PAPAKPAKH@Z
?PyWinObject_FromLARGE_INTEGER@@YAPAU_object@@AAT_LARGE_INTEGER@@@Z
?PyWinObject_FromDATE@@YAPAU_object@@N@Z
?PyWinSequence_Tuple@@YAPAU_object@@PAU1@PAK@Z
?PyWinLong_FromHANDLE@@YAPAU_object@@PAX@Z
?PyWinObject_AsTaskAllocatedWCHAR@@YAHPAU_object@@PAPA_WHPAK@Z
?PyWinObject_FreeTaskAllocatedWCHAR@@YAXPA_W@Z
?PyWin_ReleaseGlobalLock@@YAXXZ
?PyWin_AcquireGlobalLock@@YAXXZ
?PyWinGlobals_Ensure@@YAHXZ
?PyWin_SetAPIError@@YAPAU_object@@PADJ@Z
?PyWinMethod_NewTime@@YAPAU_object@@PAU1@0@Z
?PyWinMethod_NewIID@@YAPAU_object@@PAU1@0@Z
?PyWinObject_AsSECURITY_DESCRIPTOR@@YAHPAU_object@@PAPAXH@Z
?_MakeAbsoluteSD@@YAHPAXPAPAX@Z
?FreeAbsoluteSD@@YAXPAX@Z
?PyWinLong_AsVoidPtr@@YAHPAU_object@@PAPAX@Z
?PyWinObject_AsHANDLE@@YAHPAU_object@@PAPAX@Z
?PyWinCoreString_FromString@@YAPAU_object@@PB_WH@Z
?PyWinObject_AsWCHAR@@YAHPAU_object@@PAPA_WHPAK@Z
?PyWinObject_FreeWCHAR@@YAXPA_W@Z
?PyWinObject_AsReadBuffer@@YAHPAU_object@@PAPAXPAKH@Z
??0PyWin_AutoFreeBstr@@QAE@PA_W@Z
??1PyWin_AutoFreeBstr@@QAE@XZ
?PyWinObject_FreeBstr@@YAXPA_W@Z
?SetBstr@PyWin_AutoFreeBstr@@QAEXPA_W@Z
?PyWinCoreString_FromString@@YAPAU_object@@PBDH@Z
?PyWinObject_AsULARGE_INTEGER@@YAHPAU_object@@PAT_ULARGE_INTEGER@@@Z
?PyWinTime_Check@@YAHPAU_object@@@Z
?PyWinObject_AsFILETIME@@YAHPAU_object@@PAU_FILETIME@@@Z
?PyWinObject_AsIID@@YAHPAU_object@@PAU_GUID@@@Z
?PyWinObject_FromULARGE_INTEGER@@YAPAU_object@@AAT_ULARGE_INTEGER@@@Z
?PyWinObject_FromFILETIME@@YAPAU_object@@ABU_FILETIME@@@Z
?PyWinObject_FromIID@@YAPAU_object@@ABU_GUID@@@Z
?PyWinObject_FromOLECHAR@@YAPAU_object@@PB_W@Z
?PyWinObject_FromOLECHAR@@YAPAU_object@@PB_WH@Z
?PyWinObject_FromTCHAR@@YAPAU_object@@PBDH@Z
?PyWin_GetErrorMessageModule@@YAPAUHINSTANCE__@@K@Z
?PyWinObject_FromBstr@@YAPAU_object@@QA_WH@Z
?PyWinExc_COMError@@3PAU_object@@A
?PyWinObject_AsBstr@@YAHPAU_object@@PAPA_WHPAK@Z
?GetPythonTraceback@@YAPADPAU_object@@00@Z

msvcr90

?_type_info_dtor_internal_method@type_info@@QAEXXZ
??2@YAPAXI@Z
__CxxFrameHandler3
free
malloc
fprintf
__iob_func
_vsnprintf
strncpy
_snprintf
strncat
memset
_purecall
qsort
sprintf
_except_handler3
fclose
fopen
memcpy
wcsncpy
printf
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_crt_debugger_hook
__clean_type_info_names_internal
_except_handler4_common
??3@YAXPAX@Z
__CppXcptFilter
_adjust_fdiv
_amsg_exit

kernel32

MultiByteToWideChar
OutputDebugStringA
FormatMessageA
InterlockedDecrement
InterlockedIncrement
GetProcAddress
GetModuleHandleA
LoadLibraryA
DisableThreadLibraryCalls
GetCurrentThreadId
GlobalAlloc
GlobalSize
GlobalUnlock
GlobalLock
VirtualFree
VirtualProtect
VirtualAlloc
InterlockedExchange
Sleep
InterlockedCompareExchange
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

Exports

Exports

??0CPyFactory@@QAE@ABU_GUID@@@Z
??0CPyFactory@@QAE@ABV0@@Z
??0PyComEnumProviderTypeObject@@QAE@PBDPAVPyComTypeObject@@HPAUPyMethodDef@@P6APAVPyIUnknown@@PAUIUnknown@@@Z0@Z
??0PyComEnumTypeObject@@QAE@PBDPAVPyComTypeObject@@HPAUPyMethodDef@@P6APAVPyIUnknown@@PAUIUnknown@@@Z@Z
??0PyComTypeObject@@QAE@PBDPAV0@HPAUPyMethodDef@@P6APAVPyIUnknown@@PAUIUnknown@@@Z@Z
??0PyGOleWindow@@IAE@PAU_object@@@Z
??0PyGOleWindow@@QAE@ABV0@@Z
??0PyGPersist@@IAE@PAU_object@@@Z
??0PyGPersist@@QAE@ABV0@@Z
??0PyGatewayBase@@IAE@PAU_object@@@Z
??0PyGatewayBase@@QAE@ABV0@@Z
??0PyIBase@@IAE@XZ
??0PyIBase@@QAE@ABV0@@Z
??0PyIBindCtx@@IAE@PAUIUnknown@@@Z
??0PyIBindCtx@@QAE@ABV0@@Z
??0PyIClassFactory@@IAE@PAUIUnknown@@@Z
??0PyIClassFactory@@QAE@ABV0@@Z
??0PyIConnectionPoint@@IAE@PAUIUnknown@@@Z
??0PyIConnectionPoint@@QAE@ABV0@@Z
??0PyIConnectionPointContainer@@IAE@PAUIUnknown@@@Z
??0PyIConnectionPointContainer@@QAE@ABV0@@Z
??0PyIDispatch@@IAE@PAUIUnknown@@@Z
??0PyIDispatch@@QAE@ABV0@@Z
??0PyIDispatchEx@@IAE@PAUIUnknown@@@Z
??0PyIDispatchEx@@QAE@ABV0@@Z
??0PyIEnumMoniker@@IAE@PAUIUnknown@@@Z
??0PyIEnumMoniker@@QAE@ABV0@@Z
??0PyIEnumVARIANT@@IAE@PAUIUnknown@@@Z
??0PyIEnumVARIANT@@QAE@ABV0@@Z
??0PyIMoniker@@IAE@PAUIUnknown@@@Z
??0PyIMoniker@@QAE@ABV0@@Z
??0PyIOleWindow@@IAE@PAUIUnknown@@@Z
??0PyIOleWindow@@QAE@ABV0@@Z
??0PyIPersist@@IAE@PAUIUnknown@@@Z
??0PyIPersist@@QAE@ABV0@@Z
??0PyIPersistStream@@IAE@PAUIUnknown@@@Z
??0PyIPersistStream@@QAE@ABV0@@Z
??0PyIPersistStreamInit@@IAE@PAUIUnknown@@@Z
??0PyIPersistStreamInit@@QAE@ABV0@@Z
??0PyIProvideClassInfo2@@IAE@PAUIUnknown@@@Z
??0PyIProvideClassInfo2@@QAE@ABV0@@Z
??0PyIProvideClassInfo@@IAE@PAUIUnknown@@@Z
??0PyIProvideClassInfo@@QAE@ABV0@@Z
??0PyIServiceProvider@@IAE@PAUIUnknown@@@Z
??0PyIServiceProvider@@QAE@ABV0@@Z
??0PyIStream@@IAE@PAUIUnknown@@@Z
??0PyIStream@@QAE@ABV0@@Z
??0PyITypeComp@@IAE@PAUIUnknown@@@Z
??0PyITypeComp@@QAE@ABV0@@Z
??0PyITypeInfo@@IAE@PAUIUnknown@@@Z
??0PyITypeInfo@@QAE@ABV0@@Z
??0PyITypeLib@@IAE@PAUIUnknown@@@Z
??0PyITypeLib@@QAE@ABV0@@Z
??0PyIUnknown@@IAE@PAUIUnknown@@@Z
??0PyIUnknown@@QAE@ABV0@@Z
??0PyOleArgNotFound@@QAE@XZ
??0PyOleEmpty@@QAE@XZ
??0PyOleMissing@@QAE@XZ
??0PySTGMEDIUM@@QAE@PAUtagSTGMEDIUM@@@Z
??0PythonOleArgHelper@@QAE@XZ
??1CPyFactory@@QAE@XZ
??1PyComEnumProviderTypeObject@@QAE@XZ
??1PyComEnumTypeObject@@QAE@XZ
??1PyComTypeObject@@QAE@XZ
??1PyGOleWindow@@UAE@XZ
??1PyGPersist@@UAE@XZ
??1PyGatewayBase@@MAE@XZ
??1PyIBase@@MAE@XZ
??1PyIBindCtx@@MAE@XZ
??1PyIClassFactory@@MAE@XZ
??1PyIConnectionPoint@@MAE@XZ
??1PyIConnectionPointContainer@@MAE@XZ
??1PyIDispatch@@MAE@XZ
??1PyIDispatchEx@@MAE@XZ
??1PyIEnumMoniker@@MAE@XZ
??1PyIEnumVARIANT@@MAE@XZ
??1PyIMoniker@@MAE@XZ
??1PyIOleWindow@@MAE@XZ
??1PyIPersist@@MAE@XZ
??1PyIPersistStream@@MAE@XZ
??1PyIPersistStreamInit@@MAE@XZ
??1PyIProvideClassInfo2@@MAE@XZ
??1PyIProvideClassInfo@@MAE@XZ
??1PyIServiceProvider@@MAE@XZ
??1PyIStream@@MAE@XZ
??1PyITypeComp@@MAE@XZ
??1PyITypeInfo@@MAE@XZ
??1PyITypeLib@@MAE@XZ
??1PyIUnknown@@MAE@XZ
??1PySTGMEDIUM@@QAE@XZ
??1PythonOleArgHelper@@QAE@XZ
??4CPyFactory@@QAEAAV0@ABV0@@Z
??4PyComEnumProviderTypeObject@@QAEAAV0@ABV0@@Z
??4PyComEnumTypeObject@@QAEAAV0@ABV0@@Z
??4PyComTypeObject@@QAEAAV0@ABV0@@Z
??4PyGOleWindow@@QAEAAV0@ABV0@@Z
??4PyGPersist@@QAEAAV0@ABV0@@Z
??4PyGatewayBase@@QAEAAV0@ABV0@@Z
??4PyIBase@@QAEAAV0@ABV0@@Z
??4PyIBindCtx@@QAEAAV0@ABV0@@Z
??4PyIClassFactory@@QAEAAV0@ABV0@@Z
??4PyIConnectionPoint@@QAEAAV0@ABV0@@Z
??4PyIConnectionPointContainer@@QAEAAV0@ABV0@@Z
??4PyIDispatch@@QAEAAV0@ABV0@@Z
??4PyIDispatchEx@@QAEAAV0@ABV0@@Z
??4PyIEnumMoniker@@QAEAAV0@ABV0@@Z
??4PyIEnumVARIANT@@QAEAAV0@ABV0@@Z
??4PyIMoniker@@QAEAAV0@ABV0@@Z
??4PyIOleWindow@@QAEAAV0@ABV0@@Z
??4PyIPersist@@QAEAAV0@ABV0@@Z
??4PyIPersistStream@@QAEAAV0@ABV0@@Z
??4PyIPersistStreamInit@@QAEAAV0@ABV0@@Z
??4PyIProvideClassInfo2@@QAEAAV0@ABV0@@Z
??4PyIProvideClassInfo@@QAEAAV0@ABV0@@Z
??4PyIServiceProvider@@QAEAAV0@ABV0@@Z
??4PyIStream@@QAEAAV0@ABV0@@Z
??4PyITypeComp@@QAEAAV0@ABV0@@Z
??4PyITypeInfo@@QAEAAV0@ABV0@@Z
??4PyITypeLib@@QAEAAV0@ABV0@@Z
??4PyIUnknown@@QAEAAV0@ABV0@@Z
??4PyOleArgNotFound@@QAEAAV0@ABV0@@Z
??4PyOleEmpty@@QAEAAV0@ABV0@@Z
??4PyOleMissing@@QAEAAV0@ABV0@@Z
??4PySTGMEDIUM@@QAEAAV0@ABV0@@Z
??4PythonOleArgHelper@@QAEAAV0@ABV0@@Z
??_7CPyFactory@@6B@
??_7PyGOleWindow@@6B@
??_7PyGOleWindow@@6BIDispatchEx@@@
??_7PyGOleWindow@@6BIInternalUnwrapPythonObject@@@
??_7PyGOleWindow@@6BISupportErrorInfo@@@
??_7PyGPersist@@6B@
??_7PyGPersist@@6BIDispatchEx@@@
??_7PyGPersist@@6BIInternalUnwrapPythonObject@@@
??_7PyGPersist@@6BISupportErrorInfo@@@
??_7PyGatewayBase@@6BIDispatchEx@@@
??_7PyGatewayBase@@6BIInternalUnwrapPythonObject@@@
??_7PyGatewayBase@@6BISupportErrorInfo@@@
??_7PyIBase@@6B@
??_7PyIBindCtx@@6B@
??_7PyIClassFactory@@6B@
??_7PyIConnectionPoint@@6B@
??_7PyIConnectionPointContainer@@6B@
??_7PyIDispatch@@6B@
??_7PyIDispatchEx@@6B@
??_7PyIEnumMoniker@@6B@
??_7PyIEnumVARIANT@@6B@
??_7PyIMoniker@@6B@
??_7PyIOleWindow@@6B@
??_7PyIPersist@@6B@
??_7PyIPersistStream@@6B@
??_7PyIPersistStreamInit@@6B@
??_7PyIProvideClassInfo2@@6B@
??_7PyIProvideClassInfo@@6B@
??_7PyIServiceProvider@@6B@
??_7PyIStream@@6B@
??_7PyITypeComp@@6B@
??_7PyITypeInfo@@6B@
??_7PyITypeLib@@6B@
??_7PyIUnknown@@6B@
??_FPySTGMEDIUM@@QAEXXZ
?AddRef@CPyFactory@@UAGKXZ
?AddRef@PyGOleWindow@@MAGKXZ
?AddRef@PyGPersist@@MAGKXZ
?AddRef@PyGatewayBase@@UAGKXZ
?Advise@PyIConnectionPoint@@SAPAU_object@@PAU2@0@Z
?Bind@PyITypeComp@@QAEPAU_object@@PA_WG@Z
?BindToObject@PyIMoniker@@SAPAU_object@@PAU2@0@Z
?BindToStorage@PyIMoniker@@SAPAU_object@@PAU2@0@Z
?BindType@PyITypeComp@@QAEPAU_object@@PA_W@Z
?Clone@PyIEnumMoniker@@SAPAU_object@@PAU2@0@Z
?Clone@PyIEnumVARIANT@@SAPAU_object@@PAU2@0@Z
?Clone@PyIStream@@SAPAU_object@@PAU2@0@Z
?Close@PySTGMEDIUM@@QAEXXZ
?Commit@PyIStream@@SAPAU_object@@PAU2@0@Z
?ComposeWith@PyIMoniker@@SAPAU_object@@PAU2@0@Z
?ContextSensitiveHelp@PyGOleWindow@@MAGJH@Z
?ContextSensitiveHelp@PyIOleWindow@@SAPAU_object@@PAU2@0@Z
?CopyTo@PyIStream@@SAPAU_object@@PAU2@0@Z
?CopyTo@PySTGMEDIUM@@QAEHPAUtagSTGMEDIUM@@@Z
?CreateInstance@CPyFactory@@UAGJPAUIUnknown@@ABU_GUID@@PAPAX@Z
?CreateInstance@PyIClassFactory@@SAPAU_object@@PAU2@0@Z
?CreateNewPythonInstance@CPyFactory@@IAGJABU_GUID@@0PAPAU_object@@@Z
?DeleteMemberByDispID@PyGatewayBase@@UAGJJ@Z
?DeleteMemberByDispID@PyIDispatchEx@@SAPAU_object@@PAU2@0@Z
?DeleteMemberByName@PyGatewayBase@@UAGJPA_WK@Z
?DeleteMemberByName@PyIDispatchEx@@SAPAU_object@@PAU2@0@Z
?DropOwnership@PySTGMEDIUM@@QAEXXZ
?Enum@PyIMoniker@@SAPAU_object@@PAU2@0@Z
?EnumConnectionPoints@PyIConnectionPointContainer@@SAPAU_object@@PAU2@0@Z
?EnumConnections@PyIConnectionPoint@@SAPAU_object@@PAU2@0@Z
?EnumObjectParam@PyIBindCtx@@SAPAU_object@@PAU2@0@Z
?FindConnectionPoint@PyIConnectionPointContainer@@SAPAU_object@@PAU2@0@Z
?GetBindOptions@PyIBindCtx@@SAPAU_object@@PAU2@0@Z
?GetClassID@PyGPersist@@MAGJPAU_GUID@@@Z
?GetClassID@PyIPersist@@SAPAU_object@@PAU2@0@Z
?GetClassInfoA@PyIProvideClassInfo@@SAPAU_object@@PAU2@0@Z
?GetConnectionInterface@PyIConnectionPoint@@SAPAU_object@@PAU2@0@Z
?GetConnectionPointContainer@PyIConnectionPoint@@SAPAU_object@@PAU2@0@Z
?GetContainingTypeLib@PyITypeInfo@@QAEPAU_object@@XZ
?GetDispID@PyGatewayBase@@UAGJPA_WKPAJ@Z
?GetDispID@PyIDispatchEx@@SAPAU_object@@PAU2@0@Z
?GetDisplayName@PyIMoniker@@SAPAU_object@@PAU2@0@Z
?GetDocumentation@PyITypeInfo@@QAEPAU_object@@J@Z
?GetDocumentation@PyITypeLib@@QAEPAU_object@@H@Z
?GetFuncDesc@PyITypeInfo@@QAEPAU_object@@H@Z
?GetGUID@PyIProvideClassInfo2@@SAPAU_object@@PAU2@0@Z
?GetI@PyIBindCtx@@SAPAUIBindCtx@@PAU_object@@@Z
?GetI@PyIClassFactory@@SAPAUIClassFactory@@PAU_object@@@Z
?GetI@PyIConnectionPoint@@SAPAUIConnectionPoint@@PAU_object@@@Z
?GetI@PyIConnectionPointContainer@@SAPAUIConnectionPointContainer@@PAU_object@@@Z
?GetI@PyIDispatch@@SAPAUIDispatch@@PAU_object@@@Z
?GetI@PyIDispatchEx@@SAPAUIDispatchEx@@PAU_object@@@Z
?GetI@PyIEnumMoniker@@SAPAUIEnumMoniker@@PAU_object@@@Z
?GetI@PyIEnumVARIANT@@SAPAUIEnumVARIANT@@PAU_object@@@Z
?GetI@PyIMoniker@@SAPAUIMoniker@@PAU_object@@@Z
?GetI@PyIOleWindow@@SAPAUIOleWindow@@PAU_object@@@Z
?GetI@PyIPersist@@SAPAUIPersist@@PAU_object@@@Z
?GetI@PyIPersistStream@@SAPAUIPersistStream@@PAU_object@@@Z
?GetI@PyIPersistStreamInit@@SAPAUIPersistStreamInit@@PAU_object@@@Z
?GetI@PyIProvideClassInfo2@@SAPAUIProvideClassInfo2@@PAU_object@@@Z
?GetI@PyIProvideClassInfo@@SAPAUIProvideClassInfo@@PAU_object@@@Z
?GetI@PyIServiceProvider@@SAPAUIServiceProvider@@PAU_object@@@Z
?GetI@PyIStream@@SAPAUIStream@@PAU_object@@@Z
?GetI@PyITypeComp@@SAPAUITypeComp@@PAU_object@@@Z
?GetI@PyITypeInfo@@SAPAUITypeInfo@@PAU_object@@@Z
?GetI@PyITypeLib@@SAPAUITypeLib@@PAU_object@@@Z
?GetI@PyIUnknown@@SAPAUIUnknown@@PAU_object@@@Z
?GetIDsOfNames@PyGatewayBase@@UAGJABU_GUID@@PAPA_WIKPAJ@Z
?GetIDsOfNames@PyIDispatch@@SAPAU_object@@PAU2@0@Z
?GetIID@PyGOleWindow@@MAE?AU_GUID@@XZ
?GetIID@PyGPersist@@MAE?AU_GUID@@XZ
?GetIID@PyGatewayBase@@UAE?AU_GUID@@XZ
?GetImplTypeFlags@PyITypeInfo@@QAEPAU_object@@H@Z
?GetLibAttr@PyITypeLib@@QAEPAU_object@@XZ
?GetMemberName@PyGatewayBase@@UAGJJPAPA_W@Z
?GetMemberName@PyIDispatchEx@@SAPAU_object@@PAU2@0@Z
?GetMemberProperties@PyGatewayBase@@UAGJJKPAK@Z
?GetMemberProperties@PyIDispatchEx@@SAPAU_object@@PAU2@0@Z
?GetNameSpaceParent@PyGatewayBase@@UAGJPAPAUIUnknown@@@Z
?GetNames@PyITypeInfo@@QAEPAU_object@@J@Z
?GetNextDispID@PyGatewayBase@@UAGJKJPAJ@Z
?GetNextDispID@PyIDispatchEx@@SAPAU_object@@PAU2@0@Z
?GetObjectParam@PyIBindCtx@@SAPAU_object@@PAU2@0@Z
?GetRefTypeInfo@PyITypeInfo@@QAEPAU_object@@K@Z
?GetRefTypeOfImplType@PyITypeInfo@@QAEPAU_object@@H@Z
?GetRunningObjectTable@PyIBindCtx@@SAPAU_object@@PAU2@0@Z
?GetSizeMax@PyIPersistStream@@SAPAU_object@@PAU2@0@Z
?GetTypeAttr@PyITypeInfo@@QAEPAU_object@@XZ
?GetTypeComp@PyITypeInfo@@QAEPAU_object@@XZ
?GetTypeComp@PyITypeLib@@QAEPAU_object@@XZ
?GetTypeInfo@PyGatewayBase@@UAGJIKPAPAUITypeInfo@@@Z
?GetTypeInfo@PyIDispatch@@SAPAU_object@@PAU2@0@Z
?GetTypeInfo@PyITypeLib@@QAEPAU_object@@H@Z
?GetTypeInfoCount@PyGatewayBase@@UAGJPAI@Z
?GetTypeInfoCount@PyIDispatch@@SAPAU_object@@PAU2@0@Z
?GetTypeInfoCount@PyITypeLib@@QAEPAU_object@@XZ
?GetTypeInfoOfGuid@PyITypeLib@@QAEPAU_object@@ABU_GUID@@@Z
?GetTypeInfoType@PyITypeLib@@QAEPAU_object@@H@Z
?GetVarDesc@PyITypeInfo@@QAEPAU_object@@H@Z
?GetWindow@PyGOleWindow@@MAGJPAPAUHWND__@@@Z
?GetWindow@PyIOleWindow@@SAPAU_object@@PAU2@0@Z
?Hash@PyIMoniker@@SAPAU_object@@PAU2@0@Z
?InitNew@PyIPersistStreamInit@@SAPAU_object@@PAU2@0@Z
?InterfaceSupportsErrorInfo@PyGatewayBase@@UAGJABU_GUID@@@Z
?Invoke@PyGatewayBase@@UAGJJABU_GUID@@KGPAUtagDISPPARAMS@@PAUtagVARIANT@@PAUtagEXCEPINFO@@PAI@Z
?Invoke@PyIDispatch@@SAPAU_object@@PAU2@0@Z
?InvokeEx@PyGatewayBase@@UAGJJKGPAUtagDISPPARAMS@@PAUtagVARIANT@@PAUtagEXCEPINFO@@PAUIServiceProvider@@@Z
?InvokeEx@PyIDispatchEx@@SAPAU_object@@PAU2@0@Z
?InvokeTypes@PyIDispatch@@SAPAU_object@@PAU2@0@Z
?InvokeViaPolicy@PyGatewayBase@@MAAJPBDPAPAU_object@@0ZZ
?IsDirty@PyIPersistStream@@SAPAU_object@@PAU2@0@Z
?IsEqual@PyIMoniker@@SAPAU_object@@PAU2@0@Z
?IsSystemMoniker@PyIMoniker@@SAPAU_object@@PAU2@0@Z
?Load@PyIPersistStream@@SAPAU_object@@PAU2@0@Z
?LockRegion@PyIStream@@SAPAU_object@@PAU2@0@Z
?LockServer@CPyFactory@@UAGJH@Z
?LockServer@PyIClassFactory@@SAPAU_object@@PAU2@0@Z
?MakeBstrToObj@@YAPAU_object@@QA_W@Z
?MakeOLECHARToObj@@YAPAU_object@@PB_W@Z
?MakeOLECHARToObj@@YAPAU_object@@PB_WH@Z
?MakeObjToVariant@PythonOleArgHelper@@QAEHPAU_object@@PAUtagVARIANT@@0@Z
?MakePythonArgumentTuples@@YAHPAPAU_object@@PAPAVPythonOleArgHelper@@01PAUtagDISPPARAMS@@@Z
?MakeVariantToObj@PythonOleArgHelper@@QAEPAU_object@@PAUtagVARIANT@@@Z
?Next@PyIEnumMoniker@@SAPAU_object@@PAU2@0@Z
?Next@PyIEnumVARIANT@@SAPAU_object@@PAU2@0@Z
?ParseTypeInformation@PythonOleArgHelper@@QAEHPAU_object@@@Z
?PyCom_BstrFromPyObject@@YAHPAU_object@@PAPA_WH@Z
?PyCom_BuildInternalPyException@@YAPAU_object@@PAD@Z
?PyCom_BuildPyException@@YAPAU_object@@JPAUIUnknown@@ABU_GUID@@@Z
?PyCom_BuildPyExceptionFromEXCEPINFO@@YAPAU_object@@JPAUtagEXCEPINFO@@I@Z
?PyCom_DLLAddRef@@YAXXZ
?PyCom_DLLReleaseRef@@YAXXZ
?PyCom_EnableQuitMessage@@YAXK@Z
?PyCom_ExcepInfoFromPyException@@YAXPAUtagEXCEPINFO@@@Z
?PyCom_ExcepInfoFromPyObject@@YAHPAU_object@@PAUtagEXCEPINFO@@PAJ@Z
?PyCom_InterfaceFromPyInstanceOrObject@@YAHPAU_object@@ABU_GUID@@PAPAXH@Z
?PyCom_IsGatewayRegistered@@YAHABU_GUID@@@Z
?PyCom_LogF@@YAXPBDZZ
?PyCom_LoggerException@@YAXPAU_object@@PBDZZ
?PyCom_LoggerNonServerException@@YAXPAU_object@@PBDZZ
?PyCom_LoggerWarning@@YAXPAU_object@@PBDZZ
?PyCom_PyObjectAsSTATSTG@@YAHPAU_object@@PAUtagSTATSTG@@K@Z
?PyCom_PyObjectAsSTGOPTIONS@@YAHPAU_object@@PAPAUtagSTGOPTIONS@@@Z
?PyCom_PyObjectFromExcepInfo@@YAPAU_object@@PBUtagEXCEPINFO@@@Z
?PyCom_PyObjectFromSAFEARRAY@@YAPAU_object@@PAUtagSAFEARRAY@@W4VARENUM@@@Z
?PyCom_PyObjectFromSTATPROPSETSTG@@YAPAU_object@@PAUtagSTATPROPSETSTG@@@Z
?PyCom_PyObjectFromSTATSTG@@YAPAU_object@@PAUtagSTATSTG@@@Z
?PyCom_RegisterClientType@@YAHPAU_typeobject@@PBU_GUID@@@Z
?PyCom_RegisterExtensionSupport@@YAHPAU_object@@PBUPyCom_InterfaceSupportInfo@@H@Z
?PyCom_RegisterGatewayObject@@YAJABU_GUID@@P6AJPAU_object@@PAVPyGatewayBase@@PAPAX0@ZPBD@Z
?PyCom_SAFEARRAYFromPyObject@@YAHPAU_object@@PAPAUtagSAFEARRAY@@W4VARENUM@@@Z
?PyCom_SetAndLogCOMErrorFromPyException@@YAJPBDABU_GUID@@@Z
?PyCom_SetAndLogCOMErrorFromPyExceptionEx@@YAJPAU_object@@PBDABU_GUID@@@Z
?PyCom_SetCOMErrorFromPyException@@YAJABU_GUID@@@Z
?PyCom_SetCOMErrorFromSimple@@YAJJABU_GUID@@PBD@Z
?PyCom_StreamMessage@@YAXPBD@Z
?PyGatewayConstruct@PyGOleWindow@@SAJPAU_object@@PAVPyGatewayBase@@PAPAXABU_GUID@@@Z
?PyGatewayConstruct@PyGPersist@@SAJPAU_object@@PAVPyGatewayBase@@PAPAXABU_GUID@@@Z
?PyGatewayConstruct@PyGatewayBase@@SAJPAU_object@@PAV1@PAPAXABU_GUID@@@Z
?PyObConstruct@PyIBindCtx@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIClassFactory@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIConnectionPoint@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIConnectionPointContainer@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIDispatch@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIDispatchEx@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIEnumMoniker@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIEnumVARIANT@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIMoniker@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIOleWindow@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIPersist@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIPersistStream@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIPersistStreamInit@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIProvideClassInfo2@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIProvideClassInfo@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIServiceProvider@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIStream@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyITypeComp@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyITypeInfo@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyITypeLib@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIUnknown@@SAPAV1@PAUIUnknown@@@Z
?PyObject_AsCurrency@@YAHPAU_object@@PATtagCY@@@Z
?PyObject_AsOLEMENUGROUPWIDTHS@@YAHPAU_object@@PAUtagOleMenuGroupWidths@@@Z
?PyObject_AsPROPVARIANT@@YAHPAU_object@@PAUtagPROPVARIANT@@@Z
?PyObject_FromCurrency@@YAPAU_object@@AATtagCY@@@Z
?PyObject_FromOLEMENUGROUPWIDTHS@@YAPAU_object@@PBUtagOleMenuGroupWidths@@@Z
?PyObject_FromPROPVARIANT@@YAPAU_object@@PAUtagPROPVARIANT@@@Z
?PyObject_FromPROPVARIANTs@@YAPAU_object@@PAUtagPROPVARIANT@@K@Z
?PyObject_FromSTGMEDIUM@@YAPAVPySTGMEDIUM@@PAUtagSTGMEDIUM@@@Z
?PyOleArgNotFoundType@@3U_typeobject@@A
?PyOleEmptyType@@3U_typeobject@@A
?PyOleMissingType@@3U_typeobject@@A
?QueryInterface@CPyFactory@@UAGJABU_GUID@@PAPAX@Z
?QueryInterface@PyGOleWindow@@MAGJABU_GUID@@PAPAX@Z
?QueryInterface@PyGPersist@@MAGJABU_GUID@@PAPAX@Z
?QueryInterface@PyGatewayBase@@UAGJABU_GUID@@PAPAX@Z
?QueryInterface@PyIUnknown@@SAPAU_object@@PAU2@0@Z
?QueryService@PyIServiceProvider@@SAPAU_object@@PAU2@0@Z
?Read@PyIStream@@SAPAU_object@@PAU2@0@Z
?RegisterObjectParam@PyIBindCtx@@SAPAU_object@@PAU2@0@Z
?Release@CPyFactory@@UAGKXZ
?Release@PyGOleWindow@@MAGKXZ
?Release@PyGPersist@@MAGKXZ
?Release@PyGatewayBase@@UAGKXZ
?Reset@PyIEnumMoniker@@SAPAU_object@@PAU2@0@Z
?Reset@PyIEnumVARIANT@@SAPAU_object@@PAU2@0@Z
?Revert@PyIStream@@SAPAU_object@@PAU2@0@Z
?RevokeObjectParam@PyIBindCtx@@SAPAU_object@@PAU2@0@Z
?SafeRelease@PyIUnknown@@SAXPAV1@@Z
?Save@PyIPersistStream@@SAPAU_object@@PAU2@0@Z
?Seek@PyIStream@@SAPAU_object@@PAU2@0@Z
?SetBindOptions@PyIBindCtx@@SAPAU_object@@PAU2@0@Z
?SetPythonCOMError@PyIConnectionPoint@@SAPAU_object@@PAU2@J@Z
?SetPythonCOMError@PyIConnectionPointContainer@@SAPAU_object@@PAU2@J@Z
?SetPythonCOMError@PyIDispatchEx@@SAPAU_object@@PAU2@J@Z
?SetSize@PyIStream@@SAPAU_object@@PAU2@0@Z
?Skip@PyIEnumMoniker@@SAPAU_object@@PAU2@0@Z
?Skip@PyIEnumVARIANT@@SAPAU_object@@PAU2@0@Z
?Stat@PyIStream@@SAPAU_object@@PAU2@0@Z
?ThisAsIID@PyGOleWindow@@MAEPAXU_GUID@@@Z
?ThisAsIID@PyGPersist@@MAEPAXU_GUID@@@Z
?ThisAsIID@PyGatewayBase@@UAEPAXU_GUID@@@Z
?Type@PySTGMEDIUM@@2U_typeobject@@A
?Unadvise@PyIConnectionPoint@@SAPAU_object@@PAU2@0@Z
?UnlockRegion@PyIStream@@SAPAU_object@@PAU2@0@Z
?Unwrap@PyGatewayBase@@UAGJPAPAU_object@@@Z
?Write@PyIStream@@SAPAU_object@@PAU2@0@Z
?cmp@PyIBase@@SAHPAU_object@@0@Z
?compare@PyIBase@@UAEHPAU_object@@@Z
?compare@PyIUnknown@@UAEHPAU_object@@@Z
?dealloc@PyIBase@@SAXPAU_object@@@Z
?deallocFunc@PySTGMEDIUM@@SAXPAU_object@@@Z
?getattr@PyIBase@@UAEPAU_object@@PAD@Z
?getattro@PyIBase@@SAPAU_object@@PAU2@0@Z
?getattro@PySTGMEDIUM@@SAPAU_object@@PAU2@0@Z
?is_interface_type@PyComTypeObject@@SAHPAU_object@@@Z
?is_object@PyIBase@@QAEHPAVPyComTypeObject@@@Z
?is_object@PyIBase@@SAHPAU_object@@PAVPyComTypeObject@@@Z
?iter@PyComEnumProviderTypeObject@@SAPAU_object@@PAU2@@Z
?iter@PyComEnumTypeObject@@SAPAU_object@@PAU2@@Z
?iter@PyIBase@@UAEPAU_object@@XZ
?iternext@PyComEnumTypeObject@@SAPAU_object@@PAU2@@Z
?iternext@PyIBase@@UAEPAU_object@@XZ
?methods@PySTGMEDIUM@@2PAUPyMethodDef@@A
?repr@PyIBase@@SAPAU_object@@PAU2@@Z
?repr@PyIBase@@UAEPAU_object@@XZ
?repr@PyIUnknown@@UAEPAU_object@@XZ
?richcmp@PyIBase@@SAPAU_object@@PAU2@0H@Z
?setattr@PyIBase@@UAEHPADPAU_object@@@Z
?setattro@PyIBase@@SAHPAU_object@@00@Z
?szErrMsgObjectReleased@PyIUnknown@@2PADA
?type@PyIBindCtx@@2VPyComTypeObject@@A
?type@PyIClassFactory@@2VPyComTypeObject@@A
?type@PyIConnectionPoint@@2VPyComTypeObject@@A
?type@PyIConnectionPointContainer@@2VPyComTypeObject@@A
?type@PyIDispatch@@2VPyComTypeObject@@A
?type@PyIDispatchEx@@2VPyComTypeObject@@A
?type@PyIEnumMoniker@@2VPyComEnumTypeObject@@A
?type@PyIEnumVARIANT@@2VPyComEnumTypeObject@@A
?type@PyIMoniker@@2VPyComEnumProviderTypeObject@@A
?type@PyIOleWindow@@2VPyComTypeObject@@A
?type@PyIPersist@@2VPyComTypeObject@@A
?type@PyIPersistStream@@2VPyComTypeObject@@A
?type@PyIPersistStreamInit@@2VPyComTypeObject@@A
?type@PyIProvideClassInfo2@@2VPyComTypeObject@@A
?type@PyIProvideClassInfo@@2VPyComTypeObject@@A
?type@PyIServiceProvider@@2VPyComTypeObject@@A
?type@PyIStream@@2VPyComTypeObject@@A
?type@PyITypeComp@@2VPyComTypeObject@@A
?type@PyITypeInfo@@2VPyComTypeObject@@A
?type@PyITypeLib@@2VPyComTypeObject@@A
?type@PyIUnknown@@2VPyComTypeObject@@A
DllCanUnloadNow
DllGetClassObject
DllRegisterServerEx
DllUnregisterServerEx
PyCom_CoInitialize
PyCom_CoInitializeEx
PyCom_CoUninitialize
PyCom_InterfaceFromPyObject
PyCom_MakeOlePythonCall
PyCom_PyObjectFromIUnknown
PyCom_PyObjectFromVariant
PyCom_VariantFromPyObject
_DllMain@12
initpythoncom

Sections

.text
Size: 195KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 106KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

53a001f27d08e499b095241bcd7347a7

Headers

File Characteristics

Imports

oleaut32

ole32

user32

python26

pywintypes26

msvcr90

kernel32

Exports

Exports

Sections

.text Size: 195KB - Virtual size: 195KB

.rdata Size: 109KB - Virtual size: 109KB

.data Size: 13KB - Virtual size: 39KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 25KB - Virtual size: 25KB

.text Size: 106KB - Virtual size: 108KB

.text
Size: 195KB - Virtual size: 195KB

.rdata
Size: 109KB - Virtual size: 109KB

.data
Size: 13KB - Virtual size: 39KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 25KB - Virtual size: 25KB

.text
Size: 106KB - Virtual size: 108KB