initinterpnd
Static task
static1
Behavioral task
behavioral1
Sample
fe009ac45226822892c0b3762a967887b7b8ef4b9dcc5ff3fe30b119a59da1e0.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
fe009ac45226822892c0b3762a967887b7b8ef4b9dcc5ff3fe30b119a59da1e0.dll
Resource
win10v2004-20240226-en
General
-
Target
fe009ac45226822892c0b3762a967887b7b8ef4b9dcc5ff3fe30b119a59da1e0
-
Size
221KB
-
MD5
3a143b27e288da5d819d0befe42c6146
-
SHA1
05e1f56f86428312dee29993a6cc84b66a4e4e3f
-
SHA256
fe009ac45226822892c0b3762a967887b7b8ef4b9dcc5ff3fe30b119a59da1e0
-
SHA512
e434171a6fb27481ca9986cd8c3d5b45a7e0844395f4a65f9c5c514e11cbcab753dbc34ba9641143c88f5b3fe462df2d70cc6528dbbd9a5e8ea615136600f64d
-
SSDEEP
3072:8PFlvBc8+S3Nc7ho5PR3XXFACxZUfLI7t5rQYQPDmdSWbLn583njbbYS0QPlFqN:8/8ABxmfLI7t5rQYQLm3/MnsS0b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe009ac45226822892c0b3762a967887b7b8ef4b9dcc5ff3fe30b119a59da1e0
Files
-
fe009ac45226822892c0b3762a967887b7b8ef4b9dcc5ff3fe30b119a59da1e0.dll windows:5 windows x86 arch:x86
3dc8f7ec6ae9a7caebe764cb0ab5cf56
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
python27
PyFunction_Type
PyObject_RichCompare
PyFloat_Type
PyLong_Type
_Py_ZeroStruct
PyInt_Type
_Py_TrueStruct
PyObject_GetItem
PyErr_Clear
PyErr_ExceptionMatches
PyExc_OverflowError
PyTuple_Type
PyList_Type
PyObject_SetItem
PyErr_GivenExceptionMatches
PyExc_StopIteration
PyMethod_Type
PyExc_ValueError
PyObject_GetIter
PyDict_Type
PyIter_Next
PyExc_RuntimeError
Py_FatalError
PyThread_release_lock
PyThread_acquire_lock
PyGILState_Release
PyGILState_Ensure
PyUnicode_Type
PyBaseString_Type
PyUnicodeUCS2_Decode
PyUnicodeUCS2_FromUnicode
PyObject_CallFunctionObjArgs
PyInt_FromLong
PyDict_New
PyModule_GetDict
PyList_New
PyNumber_Add
PyNumber_InPlaceAdd
PyFloat_FromDouble
PyLong_FromLongLong
PyLong_FromLong
PyExc_UnboundLocalError
PyErr_WriteUnraisable
PyString_FromString
PyErr_PrintEx
PyCapsule_New
PyClass_Type
PyObject_SetAttrString
PyType_Ready
PyExc_AttributeError
PyObject_GetAttrString
PyImport_AddModule
PyString_InternFromString
PyObject_GC_Track
_PyObject_GC_New
PyObject_Free
PyObject_GC_Del
PyObject_ClearWeakRefs
PyMethod_New
PyString_FromFormat
PyTuple_GetItem
PyTuple_GetSlice
PyErr_NoMemory
PyObject_Malloc
PyExc_KeyError
PyObject_Str
PyCFunction_Type
PyUnicodeUCS2_FromString
PyObject_IsInstance
PyMem_Realloc
PyMem_Malloc
PyTraceBack_Here
PyBuffer_Release
PyComplex_AsCComplex
PyComplex_Type
PyFloat_AsDouble
PyComplex_FromDoubles
PyErr_WarnEx
Py_GetVersion
PyOS_snprintf
PyImport_Import
PyCapsule_GetPointer
PyCapsule_GetName
PyCapsule_IsValid
PyExc_ImportError
PyModule_GetName
PyDict_GetItemString
PyString_FromStringAndSize
PyUnicodeUCS2_DecodeUTF8
_PyByteArray_empty_string
PyString_AsStringAndSize
PyByteArray_Type
PyObject_IsTrue
PyNumber_Long
PyNumber_Int
PyInt_AsSsize_t
PyNumber_Index
PyLong_AsSsize_t
PyNumber_Divide
PyNumber_Subtract
_Py_EllipsisObject
PySequence_Tuple
PyObject_Size
PyString_Format
PyUnicodeUCS2_DecodeASCII
PyThread_free_lock
PyList_AsTuple
PyNumber_Multiply
PyNumber_InPlaceMultiply
PySlice_Type
PyExc_ZeroDivisionError
PyUnicodeUCS2_Format
PyUnicodeUCS2_FromObject
PyLong_AsLong
PyNumber_InPlaceDivide
PyNumber_Invert
PyNumber_Float
PyEval_RestoreThread
PyEval_SaveThread
PyErr_Restore
PyErr_Fetch
PyExc_NotImplementedError
PyObject_GenericGetAttr
PyMem_Free
PyErr_SetNone
PyExc_AssertionError
Py_OptimizeFlag
PyObject_GetBuffer
PyThread_allocate_lock
PyType_Modified
Py_InitModule4
PyUnicodeUCS2_FromStringAndSize
PyDict_Size
PyEval_EvalCodeEx
PyFrame_New
PyEval_EvalFrameEx
PyTraceBack_Type
PyErr_NormalizeException
PyExc_BaseException
PyObject_Call
_PyThreadState_Current
_Py_CheckRecursionLimit
_Py_CheckRecursiveCall
PyExc_SystemError
PyErr_SetString
PyDict_GetItem
PyDict_Next
PyString_Type
PyUnicodeUCS2_Compare
PyErr_Occurred
_PyString_Eq
PyDict_SetItem
PyString_AsString
PyExc_TypeError
PyErr_Format
PyExc_NameError
PyTuple_Pack
PySlice_New
PyTuple_New
PyCode_New
PyObject_GC_UnTrack
PyBaseObject_Type
PyInt_FromSsize_t
PyType_IsSubtype
_Py_NoneStruct
_PyList_Extend
PyList_Append
PyDict_Contains
PyObject_SetAttr
PyUnicodeUCS2_Join
PyObject_GetAttr
msvcr90
_crt_debugger_hook
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
malloc
free
memset
_vsnprintf
memcpy
_CIpow
_CIsqrt
_except_handler4_common
kernel32
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent
Exports
Exports
Sections
.text Size: 167KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ