ed060f9c8b44e8e94f695d2c654fadf8f90885e6010df7016a27bfa8e83281d5

Sharing

Copy URL Twitter E-mail

General

Target

ed060f9c8b44e8e94f695d2c654fadf8f90885e6010df7016a27bfa8e83281d5
Size

201KB
MD5

de932901efe969f408847e09e200ac4b
SHA1

9775b2f6b70077d3eb327380435f6802958d0001
SHA256

ed060f9c8b44e8e94f695d2c654fadf8f90885e6010df7016a27bfa8e83281d5
SHA512

d22d5ac99f0aca53354b2d640d1feeb1d76dff6ffeb70dba70a14a3e2de9a119c4cf62a7a3179236a3b9eaf6eeb7ebdb99a50f17c591d41530d608929c3b5136
SSDEEP

3072:s3F6f3IL/F8Fgldi5Cp1MY6YVeNm93pvCGZK6eKPCdly2q5fClvDJ5A6EZ:pIL/llWCp1MY6YVXlpvHjey56lbOZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed060f9c8b44e8e94f695d2c654fadf8f90885e6010df7016a27bfa8e83281d5

Files

ed060f9c8b44e8e94f695d2c654fadf8f90885e6010df7016a27bfa8e83281d5
.dll windows:4 windows x64 arch:x64

4d7679ba08a8433eccf789b89e435592

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
Sleep
TlsGetValue
VirtualProtect
VirtualQuery

api-ms-win-crt-heap-l1-1-0

_set_new_mode
calloc
free
malloc

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vfwprintf
fwrite

api-ms-win-crt-private-l1-1-0

memcmp
memcpy
memmove
strrchr

api-ms-win-crt-string-l1-1-0

memset
strcmp
strlen
strncmp

api-ms-win-crt-environment-l1-1-0

__p__environ
__p__wenviron

api-ms-win-crt-runtime-l1-1-0

__p___argc
__p___argv
__p___wargv
_configure_narrow_argv
_configure_wide_argv
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initialize_wide_environment
_initterm
_register_onexit_function
abort

api-ms-win-crt-time-l1-1-0

__daylight
__timezone
__tzname
_tzset

python312

PyBaseObject_Type
PyBuffer_Release
PyByteArray_Type
PyBytes_AsStringAndSize
PyBytes_FromStringAndSize
PyBytes_Size
PyCFunction_Type
PyCapsule_GetName
PyCapsule_GetPointer
PyCapsule_IsValid
PyCapsule_New
PyCapsule_Type
PyCode_NewEmpty
PyComplex_FromDoubles
PyDescr_IsData
PyDict_DelItem
PyDict_GetItemString
PyDict_GetItemWithError
PyDict_New
PyDict_Next
PyDict_SetItem
PyDict_SetItemString
PyDict_Size
PyDict_Type
PyErr_Clear
PyErr_ExceptionMatches
PyErr_Fetch
PyErr_Format
PyErr_GivenExceptionMatches
PyErr_NoMemory
PyErr_NormalizeException
PyErr_Occurred
PyErr_Restore
PyErr_SetObject
PyErr_SetString
PyErr_WarnEx
PyErr_WarnFormat
PyExc_AttributeError
PyExc_DeprecationWarning
PyExc_Exception
PyExc_ImportError
PyExc_IndexError
PyExc_KeyError
PyExc_ModuleNotFoundError
PyExc_NameError
PyExc_NotImplementedError
PyExc_OverflowError
PyExc_RuntimeError
PyExc_RuntimeWarning
PyExc_StopIteration
PyExc_SystemError
PyExc_TypeError
PyExc_UnboundLocalError
PyExc_ValueError
PyExc_ZeroDivisionError
PyException_GetTraceback
PyException_SetTraceback
PyFloat_FromDouble
PyFloat_Type
PyFrame_New
PyGC_Disable
PyGC_Enable
PyImport_AddModule
PyImport_GetModule
PyImport_GetModuleDict
PyImport_ImportModule
PyImport_ImportModuleLevelObject
PyInterpreterState_GetID
PyIter_Next
PyList_Append
PyList_AsTuple
PyList_New
PyList_Type
PyLong_AsLong
PyLong_AsSsize_t
PyLong_AsUnsignedLong
PyLong_AsUnsignedLongLong
PyLong_FromLong
PyLong_FromLongLong
PyLong_FromSize_t
PyLong_FromSsize_t
PyLong_FromUnsignedLong
PyLong_Type
PyMem_Free
PyMem_Malloc
PyMem_Realloc
PyMethod_New
PyMethod_Type
PyModuleDef_Init
PyModule_GetDict
PyModule_GetName
PyModule_NewObject
PyNumber_Add
PyNumber_InPlaceAdd
PyNumber_Index
PyNumber_Long
PyNumber_Multiply
PyOS_snprintf
PyObject_Call
PyObject_CallFinalizerFromDealloc
PyObject_ClearWeakRefs
PyObject_Format
PyObject_Free
PyObject_GC_Del
PyObject_GC_IsFinalized
PyObject_GC_Track
PyObject_GC_UnTrack
PyObject_GenericGetAttr
PyObject_GetAttr
PyObject_GetAttrString
PyObject_GetBuffer
PyObject_GetItem
PyObject_GetIter
PyObject_Hash
PyObject_IsSubclass
PyObject_IsTrue
PyObject_Not
PyObject_RichCompare
PyObject_RichCompareBool
PyObject_SetAttr
PyObject_SetAttrString
PyObject_SetItem
PyObject_Size
PyObject_Str
PyObject_VectorcallDict
PySequence_Contains
PySequence_GetSlice
PySequence_Tuple
PySlice_New
PyThreadState_Get
PyTraceBack_Here
PyTuple_GetItem
PyTuple_GetSlice
PyTuple_New
PyTuple_Pack
PyTuple_Type
PyType_IsSubtype
PyType_Modified
PyType_Ready
PyUnicode_AsUTF8
PyUnicode_Compare
PyUnicode_Concat
PyUnicode_Decode
PyUnicode_Format
PyUnicode_FromFormat
PyUnicode_FromOrdinal
PyUnicode_FromString
PyUnicode_FromStringAndSize
PyUnicode_InternFromString
PyUnicode_Join
PyUnicode_New
PyUnicode_Type
PyUnstable_Code_NewWithPosOnlyArgs
PyVectorcall_Function
Py_EnterRecursiveCall
Py_LeaveRecursiveCall
Py_Version
_PyByteArray_empty_string
_PyDict_GetItem_KnownHash
_PyObject_GC_New
_PyObject_GenericGetAttrWithDict
_PyObject_GetDictPtr
_PyThreadState_UncheckedGet
_PyType_Lookup
_PyUnicode_FastCopyCharacters
_Py_Dealloc
_Py_FalseStruct
_Py_NoneStruct
_Py_TrueStruct

Exports

Exports

PyInit__mio5_utils

Sections

.text
Size: 157KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 101B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4d7679ba08a8433eccf789b89e435592

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-time-l1-1-0

python312

Exports

Exports

Sections

.text Size: 157KB - Virtual size: 156KB

.data Size: 4KB - Virtual size: 4KB

.rdata Size: 22KB - Virtual size: 21KB

.pdata Size: 2KB - Virtual size: 2KB

.xdata Size: 2KB - Virtual size: 2KB

.bss Size: - Virtual size: 2KB

.edata Size: 512B - Virtual size: 101B

.idata Size: 9KB - Virtual size: 9KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 512B - Virtual size: 492B

.text
Size: 157KB - Virtual size: 156KB

.data
Size: 4KB - Virtual size: 4KB

.rdata
Size: 22KB - Virtual size: 21KB

.pdata
Size: 2KB - Virtual size: 2KB

.xdata
Size: 2KB - Virtual size: 2KB

.bss
Size: - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 101B

.idata
Size: 9KB - Virtual size: 9KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 512B - Virtual size: 492B