44ebc3c99c7d9fcfeaec9b0efdb912a28fef41e430c946bbc9b640e77f66762f

Sharing

Copy URL Twitter E-mail

General

Target

44ebc3c99c7d9fcfeaec9b0efdb912a28fef41e430c946bbc9b640e77f66762f
Size

72KB
MD5

ff4b17f10341ea9a96ddb70bd5b1e215
SHA1

5e64bf83f8e823565b0ed9a23109cbf351154bb0
SHA256

44ebc3c99c7d9fcfeaec9b0efdb912a28fef41e430c946bbc9b640e77f66762f
SHA512

9f16dd5310af414e657a51e3318e37c0149e1ea04c55e94788f21a4d3f685763677a6e4f76d4497e132cfcb69a5f9ddca510c80b20e65a2ea1cf6453e229170f
SSDEEP

1536:ErwPIpDh0jROmruAuBqoc+ShquQ404TK49S2WzXzxSV9l:E9p6OBBRShvQu2OWzXzxS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44ebc3c99c7d9fcfeaec9b0efdb912a28fef41e430c946bbc9b640e77f66762f

Files

44ebc3c99c7d9fcfeaec9b0efdb912a28fef41e430c946bbc9b640e77f66762f
.dll windows:4 windows x86 arch:x86

9fb23901202d98c42508a856db001d5f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libpython3.11

PyBuffer_Release
PyBytes_FromStringAndSize
PyBytes_Type
PyCallable_Check
PyCapsule_Import
PyDict_Copy
PyDict_DelItem
PyDict_GetItemWithError
PyDict_Items
PyDict_Keys
PyDict_New
PyDict_Next
PyDict_SetItem
PyDict_Type
PyDict_Update
PyErr_Clear
PyErr_ExceptionMatches
PyErr_Format
PyErr_NewException
PyErr_NoMemory
PyErr_Occurred
PyErr_SetNone
PyErr_SetObject
PyErr_SetString
PyErr_WarnEx
PyExc_AttributeError
PyExc_ImportError
PyExc_IndexError
PyExc_RuntimeError
PyExc_RuntimeWarning
PyExc_StopIteration
PyExc_SyntaxError
PyExc_TypeError
PyExc_ValueError
PyImport_ImportModule
PyIndex_Check
PyList_Append
PyList_New
PyList_SetItem
PyList_SetSlice
PyList_Type
PyLong_AsSsize_t
PyLong_FromLong
PyLong_FromSsize_t
PyMem_Free
PyMem_Malloc
PyMem_Realloc
PyModule_AddObject
PyModule_AddType
PyModule_Create2
PyModule_GetState
PyNumber_Add
PyNumber_AsSsize_t
PyObject_CallFunctionObjArgs
PyObject_CallNoArgs
PyObject_CallOneArg
PyObject_ClearWeakRefs
PyObject_Free
PyObject_GC_Del
PyObject_GC_Track
PyObject_GC_UnTrack
PyObject_GenericGetAttr
PyObject_GetAttrString
PyObject_GetBuffer
PyObject_IsTrue
PyObject_Malloc
PyObject_Realloc
PyObject_RichCompareBool
PyObject_SelfIter
PyObject_SetAttrString
PyObject_VectorcallMethod
PySequence_Fast
PySlice_AdjustIndices
PySlice_Type
PySlice_Unpack
PyState_FindModule
PyThreadState_Get
PyTuple_New
PyTuple_Pack
PyType_GenericAlloc
PyType_IsSubtype
PyType_Ready
PyUnicode_AsEncodedString
PyUnicode_AsUTF8
PyUnicode_AsUTF8AndSize
PyUnicode_DecodeUTF8
PyUnicode_FromFormat
PyUnicode_FromString
PyUnicode_FromStringAndSize
PyUnicode_Join
PyUnicode_New
PyUnicode_Type
Py_ReprEnter
Py_ReprLeave
_PyArg_BadArgument
_PyArg_CheckPositional
_PyArg_ParseTupleAndKeywords_SizeT
_PyArg_ParseTuple_SizeT
_PyArg_UnpackKeywords
_PyBytes_Resize
_PyNumber_Index
_PyObject_CallFunction_SizeT
_PyObject_CallMethodIdObjArgs
_PyObject_FastCall
_PyObject_GC_New
_PyObject_GetAttrId
_PyObject_LookupAttrId
_PyObject_SetAttrId
_PyTrash_begin
_PyTrash_cond
_PyTrash_end
_PyUnicode_FromId
_PyUnicode_Ready
_Py_BuildValue_SizeT
_Py_Dealloc
_Py_HashSecret
_Py_NoneStruct

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
InitializeCriticalSection
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
Sleep
TerminateProcess
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

_amsg_exit
_initterm
_iob
_lock
_unlock
_write
abort
calloc
free
fwrite
memmove
memcpy
realloc
strcmp
strlen
strncmp
vfprintf

Exports

Exports

PyInit__elementtree

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 152B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9fb23901202d98c42508a856db001d5f

Headers

DLL Characteristics

File Characteristics

Imports

libpython3.11

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 43KB

.data Size: 3KB - Virtual size: 2KB

.rdata Size: 5KB - Virtual size: 5KB

.eh_fram Size: 10KB - Virtual size: 9KB

.bss Size: - Virtual size: 152B

.edata Size: 512B - Virtual size: 104B

.idata Size: 5KB - Virtual size: 4KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 44KB - Virtual size: 43KB

.data
Size: 3KB - Virtual size: 2KB

.rdata
Size: 5KB - Virtual size: 5KB

.eh_fram
Size: 10KB - Virtual size: 9KB

.bss
Size: - Virtual size: 152B

.edata
Size: 512B - Virtual size: 104B

.idata
Size: 5KB - Virtual size: 4KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.reloc
Size: 2KB - Virtual size: 2KB