80761675cf2388614a7498bb0e4e46817072f317f824904893b1f9f5db7c9817

Sharing

Copy URL Twitter E-mail

General

Target

80761675cf2388614a7498bb0e4e46817072f317f824904893b1f9f5db7c9817
Size

17KB
MD5

948e47cc17fa1eb72ff443837cd9f356
SHA1

89ef7d1de0fdfd16a2d35b69f39915c77e14fc23
SHA256

80761675cf2388614a7498bb0e4e46817072f317f824904893b1f9f5db7c9817
SHA512

a2d3953ea15ddfe6e8a357be4db8aa1634642f494d879e94b3870b9dd6f8bfa64b1f5be63ed2e4345d739b423b2b732493201259a96ce44fb576242a047e917c
SSDEEP

384:NIGq2l03KCNlbqJ/z9A2g4RbXpz6gRfLe:NMrqJ/zttXpDRje

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
80761675cf2388614a7498bb0e4e46817072f317f824904893b1f9f5db7c9817

Files

80761675cf2388614a7498bb0e4e46817072f317f824904893b1f9f5db7c9817
.dll windows:6 windows x64 arch:x64

bf3f5e489b59a02f604356544e79e4b0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

sdl2

SDL_LockMutex
SDL_GetTicks
SDL_AddTimer
SDL_WasInit
SDL_InitSubSystem
SDL_CreateMutex
SDL_GetError
SDL_UnlockMutex
SDL_Delay
SDL_DestroyMutex
SDL_PushEvent

python311

PyCapsule_GetPointer
PyUnicode_FromString
PyMem_Malloc
PyCapsule_Type
PyExc_TypeError
PyGILState_Ensure
PyErr_NoMemory
PyMem_Free
PyObject_GetAttrString
PyType_Ready
PyModule_Create2
PyLong_AsLong
_PyArg_ParseTuple_SizeT
PyModule_AddObject
PyEval_RestoreThread
PyObject_Free
_Py_Dealloc
_PyArg_ParseTupleAndKeywords_SizeT
PyErr_SetString
PyFloat_FromDouble
_Py_NoneStruct
PyGILState_Release
PyLong_FromLong
PyExc_RuntimeError
PyEval_SaveThread
PyErr_Occurred
PyImport_ImportModule
PyOS_snprintf

kernel32

IsProcessorFeaturePresent
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
RtlCaptureContext
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry

vcruntime140

memset
__std_type_info_destroy_list
__C_specific_handler

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initterm_e
_initialize_onexit_table
_execute_onexit_table
_cexit
_initterm

Exports

Exports

PyInit_time

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bf3f5e489b59a02f604356544e79e4b0

Headers

DLL Characteristics

File Characteristics

Imports

sdl2

python311

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 1KB - Virtual size: 2KB

.pdata Size: 1024B - Virtual size: 720B

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 140B

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 1KB - Virtual size: 2KB

.pdata
Size: 1024B - Virtual size: 720B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 140B