293ad162441c7d2184a98cacfe00b9520fa30e948d7855dfeb9cde5b1b6bc1af

Sharing

Copy URL Twitter E-mail

General

Target

293ad162441c7d2184a98cacfe00b9520fa30e948d7855dfeb9cde5b1b6bc1af
Size

15KB
MD5

da5bac79e5dfbdac9918797abd5abc38
SHA1

22b9fe14a4f80fb789bb85c1d68c92e63dc9d0cc
SHA256

293ad162441c7d2184a98cacfe00b9520fa30e948d7855dfeb9cde5b1b6bc1af
SHA512

0c4e6661d540935fe86522ef19a3f9e01845f861285d46318edf91e3d06e726ce5d5b128795e358f03564cb0bfff7da630b299f80f4b53bc9fe7ad6005d398e1
SSDEEP

192:Oy7N/YUfoRZO9QXU3m6e8kTFHOpYkQtoH0XBgMj27JgIPyCDLUzEZY:OyeUgvO33m6e8uoiXuMS7PycUAZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
293ad162441c7d2184a98cacfe00b9520fa30e948d7855dfeb9cde5b1b6bc1af

Files

293ad162441c7d2184a98cacfe00b9520fa30e948d7855dfeb9cde5b1b6bc1af
.dll windows:6 windows x64 arch:x64

3f71ca7ee2b1254ad138dc091d664f27

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

python39

PyObject_CheckBuffer
PyBuffer_Release
PyExc_TypeError
PyModule_Create2
PyObject_GetBuffer
_PyArg_ParseTuple_SizeT
PyExc_BufferError
PyLong_FromUnsignedLong
PyExc_ValueError
PyErr_SetString
PyLong_FromUnsignedLongLong
PyLong_FromLong

kernel32

GetSystemTimeAsFileTime
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind

vcruntime140

__std_type_info_destroy_list
__C_specific_handler
memset

api-ms-win-crt-runtime-l1-1-0

_initterm
_execute_onexit_table
_initialize_onexit_table
_cexit
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e

Exports

Exports

PyInit__crcfunext

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3f71ca7ee2b1254ad138dc091d664f27

Headers

DLL Characteristics

File Characteristics

Imports

python39

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 1024B - Virtual size: 2KB

.pdata Size: 1024B - Virtual size: 540B

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 92B

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 1024B - Virtual size: 2KB

.pdata
Size: 1024B - Virtual size: 540B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 92B