2d3059c52db642fe7faa428bdb21c7a2eaa86448521b1778717c320a0d1f5f9d

Sharing

Copy URL Twitter E-mail

General

Target

2d3059c52db642fe7faa428bdb21c7a2eaa86448521b1778717c320a0d1f5f9d
Size

22KB
MD5

6ae6f9d6ebd19a0d132342a2f8d21d59
SHA1

d2394eea9cb6a2bb339e92c8dcfc2bb0b596c70d
SHA256

2d3059c52db642fe7faa428bdb21c7a2eaa86448521b1778717c320a0d1f5f9d
SHA512

b25896119009d96fc7f64642a595fe74e60a3dee4518a016f8503a2fbff7571c9920400b158db89cb093d1de64b479ecc600d0d661dd9af6a525c667b717dede
SSDEEP

384:JVho2rFtDJVgt6Z2XDOgZNuxOtaXl7APmzg4lTEU:JVdFt2h6UNZta1oj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d3059c52db642fe7faa428bdb21c7a2eaa86448521b1778717c320a0d1f5f9d

Files

2d3059c52db642fe7faa428bdb21c7a2eaa86448521b1778717c320a0d1f5f9d
.dll windows:6 windows x64 arch:x64

d4adc65ea91d057a2219ad6fb0d6de98

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

python311

PyModule_AddObject
PyBuffer_Release
PyMem_Malloc
PyObject_IsTrue
PyExc_TypeError
PyExc_NotImplementedError
PyLong_AsVoidPtr
PyErr_NoMemory
PyType_GenericAlloc
PyLong_FromVoidPtr
PyMem_Free
PyErr_Clear
_PyObject_CallMethod_SizeT
PyType_Ready
PyModule_Create2
PyObject_GetBuffer
PyObject_GC_Del
PyBool_FromLong
PyObject_Free
_Py_Dealloc
PyErr_Format
_PyArg_ParseTupleAndKeywords_SizeT
PyExc_ValueError
PyErr_SetString
PyExc_AttributeError
_Py_NoneStruct
PyObject_GC_UnTrack
PyLong_FromLong
PyLong_FromSsize_t
PyErr_Occurred
PyLong_AsSsize_t
PyType_GenericNew
PyModule_AddIntConstant

kernel32

RtlLookupFunctionEntry
RtlCaptureContext
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
RtlVirtualUnwind

vcruntime140

__std_type_info_destroy_list
memset
__C_specific_handler

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_configure_narrow_argv
_initterm_e
_initterm
_initialize_onexit_table
_execute_onexit_table
_cexit
_initialize_narrow_environment

Exports

Exports

PyInit_newbuffer

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d4adc65ea91d057a2219ad6fb0d6de98

Headers

DLL Characteristics

File Characteristics

Imports

python311

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 2KB - Virtual size: 3KB

.pdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 208B

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 2KB - Virtual size: 3KB

.pdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 208B