C:\Users\Jorge\projects\Python-2.7.3\PCbuild\unicodedata.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4af01d827419828eb7b8b337d2d26b9ead7ffd582b5ed5a8859825e2ce5969ab.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4af01d827419828eb7b8b337d2d26b9ead7ffd582b5ed5a8859825e2ce5969ab.dll
Resource
win10v2004-20240508-en
General
-
Target
4af01d827419828eb7b8b337d2d26b9ead7ffd582b5ed5a8859825e2ce5969ab
-
Size
670KB
-
MD5
10b7155b8810efd485367d01904060e6
-
SHA1
d1c36c39271bce27f1ceca7a3f18aca16b41da41
-
SHA256
4af01d827419828eb7b8b337d2d26b9ead7ffd582b5ed5a8859825e2ce5969ab
-
SHA512
abc49a826939a016ee1c367100be623884fe642c0fbf02c67c53c8294dfacb605bf629d084ac3b57d0bbf97b867af4e1d675c07fc67effa097694d0aa400d013
-
SSDEEP
12288:RX363AxoMPBt8FpQsVdFiI5mZMPXubUxktwd:B3oxM8XQsVdXSPAxLd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4af01d827419828eb7b8b337d2d26b9ead7ffd582b5ed5a8859825e2ce5969ab
Files
-
4af01d827419828eb7b8b337d2d26b9ead7ffd582b5ed5a8859825e2ce5969ab.dll windows:5 windows x86 arch:x86
a2ceecb817a4b1463ef85598f0a82d8f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
python27
Py_InitModule4
PyExc_TypeError
PyModule_AddObject
PyErr_Format
PyModule_AddStringConstant
PyType_Type
_Py_ctype_toupper
_PyUnicodeUCS2_ToNumeric
PyUnicodeUCS2_Resize
PyErr_SetString
PyUnicodeUCS2_GetSize
PyObject_Free
PyExc_ValueError
PyOS_snprintf
PyArg_ParseTuple
_PyUnicodeUCS2_ToDigit
PyExc_KeyError
PyUnicode_Type
PyCapsule_New
PyObject_GenericGetAttr
Py_BuildValue
PyInt_FromLong
_PyUnicodeUCS2_ToDecimalDigit
_PyObject_New
PyFloat_FromDouble
PyUnicodeUCS2_FromUnicode
PyString_FromString
msvcr90
free
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
sprintf
strncmp
_encode_pointer
_malloc_crt
memcpy
_encoded_null
_decode_pointer
_initterm
kernel32
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedExchange
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
Exports
Exports
initunicodedata
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 650KB - Virtual size: 650KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ