58037bfffb338b128c7164b193d2086e8f6971243f32f216f1f4b369f6ba7e9b[.]pyd

Sharing

Copy URL Twitter E-mail

General

Target

58037bfffb338b128c7164b193d2086e8f6971243f32f216f1f4b369f6ba7e9b.pyd
Size

179KB
MD5

39ca78ff78ec00ddfd049b31953edbe9
SHA1

1fd3b30bea19cb6670008625cdca51dfd04aba2e
SHA256

58037bfffb338b128c7164b193d2086e8f6971243f32f216f1f4b369f6ba7e9b
SHA512

0b8eb40f8671ff847cb18a74986eff0714e6079690992307029c7f9729a4cfed9dc373e2790c544dd1820f1dbfc9f61dd5f5575079b9b57cddb55077854a1a80
SSDEEP

3072://22IDHbxKSRYYoPQjtd4Bh1+yC5J97zkWAq/h9w3hqSFe/O3w8+JIWQh0na8Ui://oDHcHYoPh71M5JiWAO9w3hqSFJw8+1

Score

1^/10

Malware Config

Signatures

Files

58037bfffb338b128c7164b193d2086e8f6971243f32f216f1f4b369f6ba7e9b.pyd
.dll windows:6 windows x86 arch:x86

ab711bd1e44cbd1cecfcc9b51a5863b1

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:1f:14:1b:8b:30:0d:25:f3:14:eb:23:0c:d0:d1:dd
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

17/01/2022, 00:00

Not After

15/01/2025, 23:59

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3b:55:a3:b1:39:3a:9c:ea:d3:f0:90:6a:83:57:d5:dc:94:d9:94:8a:b6:f4:c6:53:cc:aa:90:96:eb:97:59:5f
Signer

Actual PE Digest

3b:55:a3:b1:39:3a:9c:ea:d3:f0:90:6a:83:57:d5:dc:94:d9:94:8a:b6:f4:c6:53:cc:aa:90:96:eb:97:59:5f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetCurrentThreadId
QueryPerformanceCounter
IsProcessorFeaturePresent

python39

PyDict_New
_PyTraceback_Add
PyMem_Free
PyErr_NoMemory
PyObject_Realloc
PyObject_GC_Track
PyBytes_FromStringAndSize
_PyObject_MakeTpCall
PyType_IsSubtype
PyObject_IsTrue
_PyByteArray_empty_string
_PyUnicode_Ready
PyMem_Malloc
_PyLong_AsInt
_PyObject_GC_New
PyUnicode_FromString
PyDict_SetItem
PyObject_Call
PyByteArray_Type
PyThreadState_Get
PyFloat_Type
PyModule_AddStringConstant
PyErr_Format
PyExc_ValueError
_PyArg_UnpackKeywords
_PyObject_LookupAttrId
PyCapsule_New
PyUnicode_Decode
PyObject_CallFunction
PyErr_SetString
PyList_Append
PyErr_Clear
PyModule_New
_Py_CheckFunctionResult
_PyArg_BadArgument
_Py_HashSecret
PyErr_NewException
PyType_Ready
PyModule_Create2
PyList_New
PyObject_GetBuffer
PyUnicode_FromFormat
PyLong_AsLong
PyObject_GC_Del
PyModule_AddObject
_PyImport_SetModule
PyDescr_NewGetSet
PyObject_Free
PyModule_GetDict
PyDict_SetItemString
PyTuple_New
PyBuffer_Release
_Py_Dealloc
_Py_NoneStruct
PyDict_GetItemWithError
Py_BuildValue
PyObject_GC_UnTrack
PyLong_FromLong
PyObject_SetAttrString
PyExc_RuntimeError
PyUnicode_AsUTF8AndSize
PyUnicode_DecodeUTF8
PyErr_Occurred
_PyArg_CheckPositional
PyModule_AddIntConstant
PyObject_Malloc
PyBool_FromLong
PyErr_SetObject
PyExc_TypeError

vcruntime140

__current_exception
memmove
memcpy
__current_exception_context
memset
_except_handler4_common
__std_type_info_destroy_list

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf

api-ms-win-crt-heap-l1-1-0

free
realloc
malloc

api-ms-win-crt-convert-l1-1-0

strtoul

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_errno
terminate
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initterm_e
_configure_narrow_argv
_seh_filter_dll
_initterm

api-ms-win-crt-utility-l1-1-0

rand_s

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-math-l1-1-0

_except1

Exports

Exports

PyInit_pyexpat

Sections

.text
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ab711bd1e44cbd1cecfcc9b51a5863b1

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

07:1f:14:1b:8b:30:0d:25:f3:14:eb:23:0c:d0:d1:ddCertificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

3b:55:a3:b1:39:3a:9c:ea:d3:f0:90:6a:83:57:d5:dc:94:d9:94:8a:b6:f4:c6:53:cc:aa:90:96:eb:97:59:5fSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

python39

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 133KB - Virtual size: 132KB

.rdata Size: 22KB - Virtual size: 21KB

.data Size: 3KB - Virtual size: 4KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 9KB - Virtual size: 9KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

07:1f:14:1b:8b:30:0d:25:f3:14:eb:23:0c:d0:d1:dd
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

3b:55:a3:b1:39:3a:9c:ea:d3:f0:90:6a:83:57:d5:dc:94:d9:94:8a:b6:f4:c6:53:cc:aa:90:96:eb:97:59:5f
Signer

.text
Size: 133KB - Virtual size: 132KB

.rdata
Size: 22KB - Virtual size: 21KB

.data
Size: 3KB - Virtual size: 4KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 9KB - Virtual size: 9KB