b43b7608c512a80cccef4dc31c99b3cc4c19ef8b5ccbbedad69bf7fce1ae9ace

Sharing

Copy URL Twitter E-mail

General

Target

b43b7608c512a80cccef4dc31c99b3cc4c19ef8b5ccbbedad69bf7fce1ae9ace
Size

21KB
MD5

de54d75433a1d7b7fcbb722519aa7768
SHA1

9a0d3340d4d3226ec386b9f4207ffd6d08d23ac9
SHA256

b43b7608c512a80cccef4dc31c99b3cc4c19ef8b5ccbbedad69bf7fce1ae9ace
SHA512

c353a19f1792058cfbef7d83ce2bd22760db5471676fc11ba27d886ae9b00df96346bf55b5f52289c488238b52540bf04fd7f8b336b380b0c53fc3258e2b22ca
SSDEEP

384:N90SdIE6/EPp80e1m1KlB80eBXRCDPH4v72VkT6NftPYl/iWPaT7TugSr:8Ule1m1KlBleMAzikT6NfBYlvojSr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b43b7608c512a80cccef4dc31c99b3cc4c19ef8b5ccbbedad69bf7fce1ae9ace

Files

b43b7608c512a80cccef4dc31c99b3cc4c19ef8b5ccbbedad69bf7fce1ae9ace
.dll windows:6 windows x64 arch:x64

e6fb5cf0e55bb70b54359caf382a0aa6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

python39

PyTuple_Size
PyModule_AddIntConstant
PyExc_RuntimeError
PyModuleDef_Init
PyCapsule_Type
PyTuple_Pack
PyFloat_FromDouble
PyList_Size
PyErr_SetString
PyExc_ValueError
PyErr_Format
PyModule_AddStringConstant
PyType_IsSubtype
_Py_Dealloc
PyTuple_GetItem
PyCapsule_GetPointer
_PyArg_ParseTuple_SizeT
PyList_New
PyList_GetItem
PyList_AsTuple
PyObject_GetAttrString
PyExc_ImportError
PySys_WriteStdout
PyModule_AddFunctions
PyImport_ImportModule
PyErr_Print
_Py_BuildValue_SizeT

kernel32

GetCurrentThreadId
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
GetCurrentProcessId
QueryPerformanceCounter
RtlCaptureContext

vcruntime140

__std_type_info_destroy_list
memset
__C_specific_handler
memcpy

api-ms-win-crt-math-l1-1-0

sqrt
ceil
cos
_dsign
sin
asin
floor

api-ms-win-crt-heap-l1-1-0

malloc
free

api-ms-win-crt-runtime-l1-1-0

_cexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm

Exports

Exports

PyInit_gixpy

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e6fb5cf0e55bb70b54359caf382a0aa6

Headers

DLL Characteristics

File Characteristics

Imports

python39

kernel32

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 1024B - Virtual size: 648B

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 76B

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 1024B - Virtual size: 648B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 76B