ad2b794273a6b4322afa4e77d869c042d1d8e6765163d31b8361a78036246ec1

Sharing

Copy URL

Twitter E-mail

General

Target

ad2b794273a6b4322afa4e77d869c042d1d8e6765163d31b8361a78036246ec1
Size

17KB
MD5

154580205f86bd0da39dbb16884f0535
SHA1

cba0e918700decb5df00f9a2546fcd9ba0d052d3
SHA256

ad2b794273a6b4322afa4e77d869c042d1d8e6765163d31b8361a78036246ec1
SHA512

fd4f885108f1ffd2e7c534f791073ff57b12ef101a09a35ca72a3fc9ab693ab62c12e2b9ab9ef3f8ec60f558e06eadec04e659ad9a90cd4823fc12dbe935bc97
SSDEEP

384:t6Gen1z9gHLn8g/4+J7xb6sCw7ATVUgZ/:t6d12r57L1KvB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad2b794273a6b4322afa4e77d869c042d1d8e6765163d31b8361a78036246ec1

Files

ad2b794273a6b4322afa4e77d869c042d1d8e6765163d31b8361a78036246ec1
.dll windows:6 windows x64 arch:x64

d08c65efe187eada70c394afbbb4d665

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

sdl2

SDL_GetError
SDL_SetError
SDL_GetWindowWMInfo
SDL_WasInit

user32

IsClipboardFormatAvailable
SetClipboardData
GetClipboardData
EnumClipboardFormats
EmptyClipboard
CloseClipboard
OpenClipboard
GetClipboardOwner
RegisterClipboardFormatA
CountClipboardFormats
GetClipboardFormatNameA

python311

PyBool_FromLong
PyImport_ImportModule
PyBytes_AsString
PyErr_Occurred
PyDict_GetItemWithError
_Py_NoneStruct
PyDict_SetItemString
PyErr_SetString
PyExc_ValueError
_Py_FalseStruct
PyUnicode_FromString
PyDict_Keys
PyExc_SystemError
PyUnicode_DecodeASCII
_Py_TrueStruct
PyCapsule_Type
PyBytes_FromStringAndSize
PyDict_GetItemString
PyDict_New
PyList_Append
PyObject_GetAttrString
PyModule_Create2
PyList_New
_PyArg_ParseTuple_SizeT
PyCapsule_GetPointer
_Py_Dealloc
PyErr_Format

kernel32

GlobalAlloc
GlobalLock
GlobalUnlock
RtlCaptureContext
RtlLookupFunctionEntry
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
GlobalSize

vcruntime140

memcpy
__C_specific_handler
memset
__std_type_info_destroy_list

api-ms-win-crt-heap-l1-1-0

realloc
malloc
free

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e
_execute_onexit_table
_seh_filter_dll
_cexit
_configure_narrow_argv
_initialize_onexit_table
_initialize_narrow_environment

api-ms-win-crt-string-l1-1-0

strcmp

Exports

Exports

PyInit_scrap

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d08c65efe187eada70c394afbbb4d665

Headers

DLL Characteristics

File Characteristics

Imports

sdl2

user32

python311

kernel32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 2KB

.pdata Size: 1024B - Virtual size: 804B

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 104B

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 2KB

.pdata
Size: 1024B - Virtual size: 804B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 104B