C:\build27\cpython\PCbuild\_ssl.pdb
Static task
static1
General
-
Target
Submod.Updater.Plugin.1.7.zip
-
Size
3.4MB
-
MD5
bd005263a960a6effa5a3c0f3e6fd510
-
SHA1
83a65128421e79673b27da4086ea8d5fd5ac10c4
-
SHA256
0b95b7472e22c64d23190b060ae18d0b102d0d1fcae0092feea1ba0c48164952
-
SHA512
a0e07d77c4030031187a993cc626ae0b09c1d6e10c82384ffc141f4d627071bae7ebbe66f99bb5807a0fceebf61f26d7471b08461a7d117ce0f22c454fc03ef7
-
SSDEEP
98304:wUoHCMVmotuj5ZJuMR5k23ZQFLlLPyCqRh:E7VtujrJuZUG1ljMD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Submod Updater Plugin/lib/windows-i686/Lib/_ssl.pyd
Files
-
Submod.Updater.Plugin.1.7.zip.zip
-
Submod Updater Plugin/game/Submods/Submod Updater Plugin/indicator_beta_warning.png.png
-
Submod Updater Plugin/game/Submods/Submod Updater Plugin/indicator_update_available.png.png
-
Submod Updater Plugin/game/Submods/Submod Updater Plugin/indicator_update_downloading.png.png
-
Submod Updater Plugin/game/Submods/Submod Updater Plugin/left_bar.png.png
-
Submod Updater Plugin/game/Submods/Submod Updater Plugin/right_bar.png.png
-
Submod Updater Plugin/game/Submods/Submod Updater Plugin/submod_updater_plugin.rpy
-
Submod Updater Plugin/game/python-packages/certifi/__init__.py
-
Submod Updater Plugin/game/python-packages/certifi/__main__.py
-
Submod Updater Plugin/game/python-packages/certifi/cacert.pem
-
Submod Updater Plugin/game/python-packages/certifi/core.py
-
Submod Updater Plugin/lib/darwin-x86_64/lib/python2.7/_ssl.so.bundle macos arch:x64
-
Submod Updater Plugin/lib/darwin-x86_64/lib/python2.7/ssl.pyo
-
Submod Updater Plugin/lib/linux-i686/lib/python2.7/_ssl.so.elf linux x86
-
Submod Updater Plugin/lib/linux-i686/lib/python2.7/ssl.pyo
-
Submod Updater Plugin/lib/linux-x86_64/lib/python2.7/_ssl.so.elf linux x64
-
Submod Updater Plugin/lib/linux-x86_64/lib/python2.7/ssl.pyo
-
Submod Updater Plugin/lib/windows-i686/Lib/_ssl.pyd.dll windows:5 windows x86 arch:x86
9a404e8c479c015879b4e123af9af0ee
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
ws2_32
send
WSAGetLastError
shutdown
closesocket
WSASetLastError
recv
select
crypt32
CertEnumCRLsInStore
CertFreeCRLContext
CertCloseStore
CertEnumCertificatesInStore
CertOpenSystemStoreA
CertFreeCertificateContext
CertGetEnhancedKeyUsage
kernel32
FreeLibrary
CloseHandle
GetVersionExA
FlushConsoleInputBuffer
SetLastError
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InterlockedExchange
GlobalMemoryStatus
GetCurrentProcessId
QueryPerformanceCounter
GetTickCount
GetStdHandle
GetFileType
GetVersion
GetModuleHandleA
GetProcAddress
GetCurrentThreadId
MultiByteToWideChar
GetLastError
Sleep
LoadLibraryA
IsDebuggerPresent
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
FindNextFileA
FindFirstFileA
FindClose
user32
GetProcessWindowStation
GetDesktopWindow
MessageBoxA
GetUserObjectInformationW
gdi32
CreateDCA
CreateCompatibleDC
GetDeviceCaps
CreateCompatibleBitmap
SelectObject
GetObjectA
BitBlt
GetBitmapBits
DeleteObject
DeleteDC
advapi32
RegisterEventSourceA
ReportEventA
DeregisterEventSource
python27
PyList_Append
PyThread_release_lock
PySet_New
PyCapsule_Import
Py_InitModule4
PyErr_WarnEx
PyUnicodeUCS2_DecodeUTF8
PyDict_SetItemString
PyExc_TypeError
PyModule_AddObject
PyErr_Format
PyGILState_Ensure
PyMem_Malloc
PyList_New
PyObject_IsTrue
PyList_AsTuple
PyErr_Clear
_PyString_Resize
PyErr_SetFromErrnoWithFilenameObject
PyLong_FromLong
PyLong_AsLong
_Py_TrueStruct
PyExc_RuntimeWarning
PyType_IsSubtype
PyErr_SetString
_PyArg_ParseTupleAndKeywords_SizeT
PyBool_FromLong
PyModule_AddIntConstant
PyObject_Free
_PyByteArray_empty_string
PyThread_get_thread_ident
PyErr_Occurred
PyExc_ValueError
PyObject_Repr
PyUnicodeUCS2_AsASCIIString
PyModule_GetDict
PyUnicodeUCS2_FromObject
PyExc_MemoryError
PyUnicodeUCS2_FromStringAndSize
PyEval_SaveThread
PyErr_WriteUnraisable
PyExc_OSError
PyMem_Free
_Py_NoneStruct
_PyArg_ParseTuple_SizeT
PyObject_CallFunctionObjArgs
PyExc_OverflowError
PyObject_SetAttrString
PyWeakref_NewRef
PyDict_SetItem
PyEval_RestoreThread
_Py_ZeroStruct
PyErr_SetObject
PyByteArray_Type
PyType_Ready
PyString_InternFromString
PyObject_GetBuffer
PyThread_allocate_lock
PySet_Add
PyErr_NoMemory
PyWeakref_GetObject
PyLong_FromUnsignedLong
Py_FileSystemDefaultEncoding
PyUnicodeUCS2_AsEncodedString
PyThread_acquire_lock
PyErr_SetFromErrno
PyString_AsString
PyList_Size
PyBuffer_IsContiguous
PyGILState_Release
PyUnicodeUCS2_FromString
PyDict_GetItem
PyString_FromStringAndSize
_PyArg_Parse_SizeT
PyBuffer_Release
PyUnicodeUCS2_FromFormat
PyInt_FromLong
PyObject_CallObject
PyErr_NewExceptionWithDoc
PyErr_SetFromWindowsErr
PyUnicodeUCS2_FromEncodedObject
PyDict_New
PyExc_IOError
PyTuple_New
PyObject_Str
PyThread_free_lock
PyCallable_Check
_PyObject_New
PyErr_CheckSignals
PyString_FromString
_Py_BuildValue_SizeT
msvcr90
_stat64i32
qsort
memset
strerror
strncpy
fwrite
memcpy
isalnum
isdigit
isspace
strchr
_errno
__clean_type_info_names_internal
_onexit
_lock
__dllonexit
_unlock
printf
_crt_debugger_hook
_except_handler4_common
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
_ftime64
abort
strstr
sprintf
_getch
signal
fputs
atoi
_gmtime64
strtol
strrchr
isupper
tolower
_strnicmp
_stricmp
_localtime64
_time64
isxdigit
strcmp
strncmp
fprintf
raise
_exit
__iob_func
vfprintf
_vsnprintf
wcsstr
getenv
sscanf
strtoul
malloc
realloc
free
fclose
memmove
_wfopen
fgets
fseek
feof
ftell
_fileno
_setmode
fopen
fflush
fread
ferror
Exports
Exports
init_ssl
Sections
.text Size: 850KB - Virtual size: 849KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 236KB - Virtual size: 235KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 43KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Submod Updater Plugin/lib/windows-i686/Lib/ssl.pyo