PyInit___init__
PyInit_linegen
Static task
static1
Behavioral task
behavioral1
Sample
9715f8d05dfd6947670fedd007c156edc1689e0c85123ba6d37c9c74221cb880.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9715f8d05dfd6947670fedd007c156edc1689e0c85123ba6d37c9c74221cb880.dll
Resource
win10v2004-20240412-en
Target
9715f8d05dfd6947670fedd007c156edc1689e0c85123ba6d37c9c74221cb880
Size
10KB
MD5
ff74a91e9636369e746c761e4bca52ba
SHA1
0057e861c945526964a643c8524fc079a476fc62
SHA256
9715f8d05dfd6947670fedd007c156edc1689e0c85123ba6d37c9c74221cb880
SHA512
ba2309afd0ecf693b60b05a64ee4f7b97b2566bcc67190f0625019e0bd1c138aa9ab4b84dfda5e4a6cf46d0be04425634637649baf65290b4795b5fe1bae8d89
SSDEEP
96:sTMFgaGxymHTAZypaSV701Al/Q4MgJyUSUxsPU1twdz1HXKGds11gMxQrOiwUrNB:sBImHTzwSV70DBIwZ1ts113GrpwiNL
Checks for missing Authenticode signature.
resource |
---|
9715f8d05dfd6947670fedd007c156edc1689e0c85123ba6d37c9c74221cb880 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PyCapsule_Import
PyImport_ImportModule
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
IsDebuggerPresent
memset
__C_specific_handler
__std_type_info_destroy_list
_cexit
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
PyInit___init__
PyInit_linegen
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ