05922a2be823ec2e4d2378a73b05bb37f2816aeea86b613a9c80e25764ac8736

Sharing

Copy URL Twitter E-mail

General

Target

05922a2be823ec2e4d2378a73b05bb37f2816aeea86b613a9c80e25764ac8736
Size

104KB
MD5

c38f96f75d504fa0c2df82327beeca31
SHA1

d059816e107302a43b60c0081b91a667327ddc13
SHA256

05922a2be823ec2e4d2378a73b05bb37f2816aeea86b613a9c80e25764ac8736
SHA512

a0609881d8d7335fc4dfa79584494b56dd1875e10564035a432bae2bfe206a0f9ddad500bb4d84e3b68a1bea0c698d5b04b19b30e02fe36410451c2a7d2147ba
SSDEEP

1536:ql/0h7pqMLGrm19IlDiBLlJb+GBKlT51addBCQUo5+QzJIcQbJQP6heP:Dl4vkBLlJb+AKlT4rso5+Q2cpP6he

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05922a2be823ec2e4d2378a73b05bb37f2816aeea86b613a9c80e25764ac8736

Files

05922a2be823ec2e4d2378a73b05bb37f2816aeea86b613a9c80e25764ac8736
.dll windows:6 windows x64 arch:x64

7ebac59d5bb55fd39074c1c4612dc8ed

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libopenblas64__v0.3.23-293-gc2f4bdbb-gcc_10_3_0-2bde3a66a51006b2b53eb373ff767a3f

ccopy_64_
cgelsd_64_
cgesdd_64_
cgesv_64_
cgetrf_64_
cheevd_64_
cpotrf_64_
dcopy_64_
dgeev_64_
dgelsd_64_
dgeqrf_64_
dgesdd_64_
dgesv_64_
dgetrf_64_
dorgqr_64_
dpotrf_64_
dsyevd_64_
scopy_64_
sgeev_64_
sgelsd_64_
sgesdd_64_
sgesv_64_
sgetrf_64_
spotrf_64_
ssyevd_64_
zcopy_64_
zgeev_64_
zgelsd_64_
zgeqrf_64_
zgesdd_64_
zgesv_64_
zgetrf_64_
zheevd_64_
zpotrf_64_
zungqr_64_

python311

PyExc_ImportError
PyExc_AttributeError
PyExc_RuntimeError
PyCapsule_Type
_Py_TrueStruct
PyErr_Print
PyModule_Create2
PyErr_Format
PyErr_NoMemory
PyErr_SetString
PyObject_GetAttrString
PyGILState_Release
PyGILState_Ensure
PyCapsule_GetPointer
PyModule_GetDict
PyDict_SetItemString
PyUnicode_FromString
_Py_Dealloc
PyImport_ImportModule

vcruntime140

memset
__std_type_info_destroy_list
__C_specific_handler
memcpy

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf

api-ms-win-crt-heap-l1-1-0

free
malloc

api-ms-win-crt-math-l1-1-0

cabsf
_cabs
exp
log
logf
expf

api-ms-win-crt-runtime-l1-1-0

feclearexcept
fetestexcept
_configure_narrow_argv
_seh_filter_dll
_initterm
_cexit
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm_e

kernel32

SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
RtlLookupFunctionEntry
UnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext

Exports

Exports

PyInit__umath_linalg

Sections

.text
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7ebac59d5bb55fd39074c1c4612dc8ed

Headers

DLL Characteristics

File Characteristics

Imports

libopenblas64__v0.3.23-293-gc2f4bdbb-gcc_10_3_0-2bde3a66a51006b2b53eb373ff767a3f

python311

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 83KB - Virtual size: 83KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 2KB - Virtual size: 3KB

.pdata Size: 3KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 440B

.text
Size: 83KB - Virtual size: 83KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 2KB - Virtual size: 3KB

.pdata
Size: 3KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 440B