60efbc88edc12364e71fdd8e1a3a7851cb85fd8fdea884a59e1b648279c29eb9

Sharing

Copy URL

Twitter E-mail

General

Target

60efbc88edc12364e71fdd8e1a3a7851cb85fd8fdea884a59e1b648279c29eb9
Size

40KB
MD5

52da199ba33a514dd6513e32331c4e2b
SHA1

38e10ddcbd3d9737bd209ff340fd589fbf20b2dd
SHA256

60efbc88edc12364e71fdd8e1a3a7851cb85fd8fdea884a59e1b648279c29eb9
SHA512

47d19f029ce21974b27602d076635c632435944fab6d8e137cbf522cd81754efc2bcc514fe0c17a02c1de922fee2239d8f9dcfb92b6874d6c5c3b07bb9502a83
SSDEEP

768:Gbw2MpT71fLI3ajUKibBa1RAckhkfFf9n58p1fq9jkrH:Gy2QRzkhkfFfF9jkr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60efbc88edc12364e71fdd8e1a3a7851cb85fd8fdea884a59e1b648279c29eb9

Files

60efbc88edc12364e71fdd8e1a3a7851cb85fd8fdea884a59e1b648279c29eb9
.dll windows:5 windows x86 arch:x86

62289a7f481737a91f6766fa4b6376d6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\buildslave\sdk-windows-i386\build\built1.10\panda3d\skel.cp39-win32.pdb

Imports

libpandaskel

?set_value_alt@BasicSkel@@QAEXH@Z
??_7TypedSkel@@6B@
?_type_handle@TypedSkel@@0VTypeHandle@@A
?get_type@TypedSkel@@UBE?AVTypeHandle@@XZ
?force_init_type@TypedSkel@@UAE?AVTypeHandle@@XZ
?init_type@TypedSkel@@SAXXZ
?get_value_alt@TypedSkel@@QAEHXZ
?set_value_alt@TypedSkel@@QAEXH@Z
?get_value_alt@BasicSkel@@QAEHXZ

libp3interrogatedb

interrogate_request_module
?interrogatedb_cat@@3V?$NotifyCategoryProxy@VNotifyCategoryGetCategory_interrogatedb@@@@A
?warning@?$NotifyCategoryProxy@VNotifyCategoryGetCategory_interrogatedb@@@@QAEAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@_N@Z
?debug@?$NotifyCategoryProxy@VNotifyCategoryGetCategory_interrogatedb@@@@QAEAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@_N@Z
?is_debug@?$NotifyCategoryProxy@VNotifyCategoryGetCategory_interrogatedb@@@@QAE_NXZ

libp3dtool

?from_os_specific_w@Filename@@SA?AV1@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@W4Type@1@@Z
??4Filename@@QAEAAV0@$$QAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??4Filename@@QAEAAV0@$$QAV0@@Z
??0Filename@@QAE@XZ
?make_absolute@Filename@@QAEXXZ
?to_os_specific@Filename@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??1Filename@@QAE@XZ
?has_environment_variable@ExecutionEnvironment@@SA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?get_dirname@Filename@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?shadow_environment_variable@ExecutionEnvironment@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?get_cwd@ExecutionEnvironment@@SA?AVFilename@@XZ
??2MemoryBase@@SAPAXI@Z
??3MemoryBase@@SAXPAX@Z
?record_python_type@TypeRegistry@@QAEXVTypeHandle@@PAU_object@@@Z
?init_global_pointer@TypeRegistry@@CAXXZ
??1TypedObject@@UAE@XZ
?_global_pointer@TypeRegistry@@0PAV1@A

libp3dtoolconfig

?assert_failure@Notify@@QAE_NPBDH0@Z
?ptr@Notify@@SAPAV1@XZ

msvcp140

??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??_7ios_base@std@@6B@
?_BADOFF@std@@3_JB
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ

python39

Py_GetVersion
PySys_GetObject
PySys_SetObject
PyImport_ImportModule
PyImport_Import
_Py_CheckFunctionResult
_PyObject_MakeTpCall
_Py_NoneStruct
_Py_FalseStruct
_Py_TrueStruct
PyExc_AssertionError
PyExc_ImportError
PyExc_NameError
PyExc_TypeError
PyLong_AsLong
PyTuple_Size
PyTuple_Pack
PyDict_Size
PyModule_Create2
PyModule_AddIntConstant
PyModule_AddObject
PyArg_UnpackTuple
PyErr_Format
PyErr_NoMemory
PyErr_Restore
PyErr_Clear
PyErr_SetString
PyThreadState_Get
PyCapsule_GetPointer
PyCapsule_New
PyCMethod_New
PyDict_New
PyLong_FromLong
PyUnicode_AsWideCharString
PyUnicode_FromFormat
PyUnicode_FromString
PyObject_Free
PyMem_Free
_Py_Dealloc
PyCallable_Check
PyObject_GenericSetAttr
PyObject_GenericGetAttr
PyObject_GetAttrString
PyType_GenericAlloc
PyType_Ready
PyDict_SetItemString

kernel32

QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess

vcruntime140

__std_type_info_destroy_list
memchr
memmove
memcpy
memset
__std_exception_copy
__std_exception_destroy
_CxxThrowException
_except_handler4_common

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_wassert
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit

api-ms-win-crt-stdio-l1-1-0

fflush
__stdio_common_vfprintf
__acrt_iob_func

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free

Exports

Exports

PyInit_skel

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

62289a7f481737a91f6766fa4b6376d6

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

libpandaskel

libp3interrogatedb

libp3dtool

libp3dtoolconfig

msvcp140

python39

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

Exports

Exports

Sections

.text Size: 21KB - Virtual size: 20KB

.rdata Size: 14KB - Virtual size: 13KB

.data Size: 2KB - Virtual size: 2KB

.gfids Size: 512B - Virtual size: 68B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 21KB - Virtual size: 20KB

.rdata
Size: 14KB - Virtual size: 13KB

.data
Size: 2KB - Virtual size: 2KB

.gfids
Size: 512B - Virtual size: 68B

.reloc
Size: 2KB - Virtual size: 1KB