3198408505a1a440f2d3da7a191312ba840cb251a5a35b096f1cb546eeccc594

Sharing

Copy URL Twitter E-mail

General

Target

3198408505a1a440f2d3da7a191312ba840cb251a5a35b096f1cb546eeccc594
Size

69KB
MD5

6891936a19f3580d1bc47a2bd3ee0c55
SHA1

197444ca7895801dd0e15b953ff73a193171db97
SHA256

3198408505a1a440f2d3da7a191312ba840cb251a5a35b096f1cb546eeccc594
SHA512

1d2392497919fe50e106dcd618cfb51f0736d2615596cb26f74e3e2242813216873385c13425d42628ad05aceaa621a11a55b1db2b96e1a2ca93a46eb1bf926d
SSDEEP

768:ogXlj8XdGT7rOy85aIvyyXn6MGr/zjhAFGbkN/0oj25c7MUf/lfUMIGXpeR1UA:9gr5Vtq/LKoQN/0ojSuMUFMMIgpOr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3198408505a1a440f2d3da7a191312ba840cb251a5a35b096f1cb546eeccc594

Files

3198408505a1a440f2d3da7a191312ba840cb251a5a35b096f1cb546eeccc594
.dll windows:6 windows x64 arch:x64

af6566512117aa9511397a43e5339ab3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

sdl2

SDL_GameControllerGetButton
SDL_GameControllerGetJoystick
SDL_GameControllerGetAxis
SDL_GameControllerGetAttached
SDL_WasInit
SDL_GameControllerName
SDL_InitSubSystem
SDL_JoystickGetGUIDString
SDL_GameControllerOpen
SDL_IsGameController
SDL_GameControllerClose
SDL_GameControllerMapping
SDL_QuitSubSystem
SDL_GameControllerRumble
SDL_NumJoysticks
SDL_GameControllerEventState
SDL_GameControllerUpdate
SDL_free
SDL_GameControllerAddMapping
SDL_JoystickGetGUID
SDL_GameControllerNameForIndex

python311

_Py_NoneStruct
PyTuple_New
PyDict_SetItemString
PyDict_Size
PyFloat_FromDouble
PyExc_AttributeError
PyNumber_Multiply
PyErr_SetString
PyIter_Next
PyErr_WriteUnraisable
PyObject_GetIter
PyErr_WarnFormat
PyExc_ValueError
PyDict_Next
PyErr_Format
PyDict_Type
PyObject_RichCompare
PyTuple_Type
_Py_FalseStruct
PyNumber_InPlaceAdd
PyModule_NewObject
PyMethod_Type
PyLong_Type
PyType_IsSubtype
PyErr_Restore
PyExc_OverflowError
_Py_Dealloc
PyImport_GetModuleDict
PyModule_GetDict
PyErr_ExceptionMatches
PyCapsule_GetPointer
PyModule_AddObject
PyErr_Fetch
PyLong_AsLong
PyBytes_AsStringAndSize
PyObject_Not
PyUnicode_AsUTF8
PyUnicode_FromFormat
PyList_New
PySlice_New
PyObject_GC_IsFinalized
PyImport_AddModule
PyType_Ready
PyObject_GetAttrString
PyErr_Clear
PyList_Append
PyObject_RichCompareBool
PyUnicode_Decode
PyWrapperDescr_Type
PyCapsule_New
_PyObject_GenericGetAttrWithDict
PyDict_SetItem
PyDict_New
PyObject_CallFinalizerFromDealloc
_PyDict_GetItem_KnownHash
PyExc_StopIteration
PyCMethod_New
PyList_Type
PyDict_GetItemString
PyObject_GetItem
PyModuleDef_Init
PyBytes_FromStringAndSize
PyDict_DelItem
PyNumber_Long
PyUnicode_Compare
PyErr_SetExcInfo
PyExc_TypeError
PyMem_Realloc
PyCapsule_Type
PyObject_IsTrue
PyExc_NameError
PyTuple_Pack
_PyByteArray_empty_string
PyMem_Malloc
Py_EnterRecursiveCall
PyExc_ImportError
_Py_TrueStruct
PyExc_SystemError
PyType_Modified
PyMethodDescr_Type
PyErr_GetExcInfo
PyUnicode_FromString
_PyType_Lookup
PyUnicode_Format
PyObject_Call
PyByteArray_Type
PyUnicode_FromStringAndSize
_PyObject_GetDictPtr
PyBaseObject_Type
PyBytes_FromString
PyObject_GetAttr
Py_GetVersion
PyInterpreterState_GetID
PyObject_Hash
PyLong_FromLong
PyObject_SetAttrString
PyExc_RuntimeError
PyTraceBack_Here
PyUnicode_AsUTF8AndSize
PyObject_GenericGetAttr
PyNumber_Remainder
PyUnicode_DecodeUTF8
PyLong_FromSsize_t
PyErr_Occurred
PyImport_ImportModuleLevelObject
PyImport_ImportModule
Py_LeaveRecursiveCall
PyExc_DeprecationWarning
PyFrame_New
PyFunction_Type
PyErr_PrintEx
PyErr_WarnEx
PyLong_AsUnsignedLong
PyErr_GivenExceptionMatches
PyCode_NewEmpty
PyErr_SetObject
PyThreadState_Get
PyOS_snprintf
PyCFunction_Type
PyUnicode_InternFromString
PyObject_SetAttr
PyDescr_IsData

kernel32

RtlCaptureContext
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry

vcruntime140

__std_type_info_destroy_list
memset
__C_specific_handler

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm
_configure_narrow_argv
_initialize_onexit_table
_execute_onexit_table
_cexit
_seh_filter_dll
_initialize_narrow_environment

Exports

Exports

PyInit_controller

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

af6566512117aa9511397a43e5339ab3

Headers

DLL Characteristics

File Characteristics

Imports

sdl2

python311

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 44KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 5KB - Virtual size: 8KB

.pdata Size: 2KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 500B

.text
Size: 44KB - Virtual size: 44KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 5KB - Virtual size: 8KB

.pdata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 500B