92c9fd3e3c172d2086217d0cb01038e1dc3d54fd8e4268b5ba88ad584dc69cd1

Sharing

Copy URL Twitter E-mail

General

Target

92c9fd3e3c172d2086217d0cb01038e1dc3d54fd8e4268b5ba88ad584dc69cd1
Size

37KB
MD5

9e87e6ea8644425ee2357cfb532cc75f
SHA1

8161915c7868abacd99fcb04826e48f7accfba87
SHA256

92c9fd3e3c172d2086217d0cb01038e1dc3d54fd8e4268b5ba88ad584dc69cd1
SHA512

488438b2724bf7d065df2026214df23dc2e8e5baa3f4d1164b6e2581331a7be93c134eda11494db15edbcc8fffb7380470ed8cbc4665dea3b16113f073227385
SSDEEP

768:nhKLP74uG4TwzF6K3ce0DjKQV1T4kMxI:Y34uGYY6W0Dr4kMx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
92c9fd3e3c172d2086217d0cb01038e1dc3d54fd8e4268b5ba88ad584dc69cd1

Files

92c9fd3e3c172d2086217d0cb01038e1dc3d54fd8e4268b5ba88ad584dc69cd1
.dll windows:6 windows x64 arch:x64

3f229635a6e98b90c22f4bebf9828a41

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

python311

PyExc_OverflowError
_Py_Dealloc
PyTuple_GetItem
PyImport_GetModuleDict
PyModule_GetDict
PyObject_Free
PyErr_ExceptionMatches
PyObject_GC_Del
PyErr_Fetch
PyObject_ClearWeakRefs
PyObject_Not
PyUnicode_AsUTF8
PyUnicode_FromFormat
PyList_New
PyImport_AddModule
PyType_Ready
PyThreadState_EnterTracing
PyObject_GetAttrString
PyErr_Clear
PyUnicode_Decode
_PyObject_GenericGetAttrWithDict
PyDict_SetItem
PyTuple_New
PyUnicode_Type
_PyDict_GetItem_KnownHash
PyMem_Free
PyErr_Restore
PyDict_GetItemString
PyModuleDef_Init
PyObject_GC_Track
PyBytes_FromStringAndSize
PyUnicode_Compare
PyExc_TypeError
PyMem_Realloc
PyObject_IsTrue
PyTuple_Pack
_PyUnicode_Ready
PyMem_Malloc
PyExc_ImportError
_Py_TrueStruct
PyExc_SystemError
_PyObject_GC_New
PyUnicode_FromString
PyObject_Call
PyUnicode_FromStringAndSize
_PyObject_GetDictPtr
PyLong_Type
_Py_NoneStruct
PyObject_GetAttr
Py_GetVersion
PyModule_NewObject
_Py_FalseStruct
PyObject_RichCompare
PyErr_Format
PyDict_Next
PyErr_WarnFormat
PyErr_SetString
PyTuple_GetSlice
PyExc_AttributeError
PyDict_Size
PyErr_NoMemory
PyDict_SetItemString
PyInterpreterState_GetID
PyObject_Hash
PyObject_GC_UnTrack
PyLong_FromLong
PyObject_SetAttrString
PyThreadState_LeaveTracing
PyMethod_New
PyExc_RuntimeError
_PyThreadState_UncheckedGet
PyTraceBack_Here
PyUnicode_AsUTF8AndSize
PyObject_GenericGetAttr
PyErr_Occurred
PyImport_ImportModuleLevelObject
PyExc_DeprecationWarning
PyFrame_New
PyExc_RuntimeWarning
PyErr_WarnEx
PyLong_AsUnsignedLong
PyErr_GivenExceptionMatches
PyCode_NewEmpty
PyThreadState_Get
PyOS_snprintf
PyUnicode_InternFromString
PyObject_SetAttr
PyDict_New
PyBaseObject_Type

vcruntime140

__std_type_info_destroy_list
memset
__C_specific_handler
strrchr
memcmp
memcpy

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_cexit
_initialize_narrow_environment

kernel32

RtlVirtualUnwind
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CloseHandle
RtlLookupFunctionEntry
RtlCaptureContext
GetProcAddress
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection

Exports

Exports

PyInit__feature_detector_cpp

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3f229635a6e98b90c22f4bebf9828a41

Headers

DLL Characteristics

File Characteristics

Imports

python311

vcruntime140

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 2KB - Virtual size: 3KB

.pdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 212B

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 2KB - Virtual size: 3KB

.pdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 212B