PyInit_np_datetime
Static task
static1
Behavioral task
behavioral1
Sample
534602682126da22a43ebbe6a6049362d6c1e1076e2acc900b74d42ff51e3a63.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
534602682126da22a43ebbe6a6049362d6c1e1076e2acc900b74d42ff51e3a63.dll
Resource
win10v2004-20240611-en
General
-
Target
534602682126da22a43ebbe6a6049362d6c1e1076e2acc900b74d42ff51e3a63
-
Size
80KB
-
MD5
d1f08e0b5af9635143f384299a3d3a57
-
SHA1
144209720990ec7616193a49a3c5874cd2cadd19
-
SHA256
534602682126da22a43ebbe6a6049362d6c1e1076e2acc900b74d42ff51e3a63
-
SHA512
00268ec50c50cdc9cff35ad5fa80e61db9fcfb0843097b9e22069d6421d857b1243a6c5deab2c9e43f5ab016e32ffac6aa7f4e4a7ab45a23f7dd8dc96a322c28
-
SSDEEP
1536:NczSjyXNzgh6vnqe48QvmFjbc79q08lDP3MpalHR0mrzsdRHm:AshbmFHc79TTeRHrzsdR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 534602682126da22a43ebbe6a6049362d6c1e1076e2acc900b74d42ff51e3a63
Files
-
534602682126da22a43ebbe6a6049362d6c1e1076e2acc900b74d42ff51e3a63.dll windows:6 windows x86 arch:x86
1d40dd65c60a478e0919638d23ffe5bc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
python38
PyInterpreterState_GetID
Py_GetVersion
PyObject_GetAttr
PyLong_AsLongLong
PyTuple_New
PyDict_SetItemString
PyDict_Size
PyLong_FromLongLong
PyFrame_Type
PyExc_AttributeError
PyUnicode_New
PyErr_WriteUnraisable
PyObject_GetIter
PyErr_WarnFormat
PyEval_EvalCodeEx
_Py_CheckRecursiveCall
PyDict_Next
PyObject_RichCompare
PyTuple_Type
_Py_FalseStruct
PyFloat_Type
PyModule_NewObject
PyMethod_Type
PyLong_Type
PyType_IsSubtype
PyExc_OverflowError
PyImport_GetModuleDict
PyModule_GetDict
PyObject_Format
PyErr_ExceptionMatches
PyCapsule_GetPointer
PyModule_AddObject
PyObject_Not
_PyUnicodeWriter_Finish
PyUnicode_AsUTF8
PyUnicode_FromFormat
PyList_New
PyImport_AddModule
PyErr_Clear
PyCode_New
PyException_SetTraceback
PyCapsule_New
PyDict_SetItem
PyDict_New
PyUnicode_Type
_PyDict_GetItem_KnownHash
PyNumber_Index
PyExc_StopIteration
PyCapsule_Import
PyList_Type
PyUnicode_Concat
_PyFloat_FormatAdvancedWriter
PyObject_GetItem
PyObject_CallObject
PyModuleDef_Init
PyBytes_FromStringAndSize
PyUnicode_Compare
_PyUnicodeWriter_Init
PyExc_TypeError
PyMem_Realloc
PyCFunction_NewEx
PyCapsule_Type
PyObject_IsTrue
PyExc_NameError
PyTuple_Pack
_PyUnicode_Ready
PyMem_Malloc
PyExc_ImportError
_Py_TrueStruct
PyExc_SystemError
_PyUnicode_FastCopyCharacters
PyObject_SetItem
PyException_SetCause
PyEval_EvalFrameEx
PyUnicode_FromString
_PyUnicodeWriter_Dealloc
PyObject_Call
PyType_Type
_PyLong_FormatAdvancedWriter
PyUnicode_FromStringAndSize
_PyObject_GetDictPtr
PyErr_GivenExceptionMatches
PyCode_NewEmpty
PyErr_SetObject
PyExc_Exception
_Py_CheckRecursionLimit
PyThreadState_Get
PyOS_snprintf
PyCFunction_Type
PyUnicode_InternFromString
PyObject_SetAttr
_PyDict_NewPresized
PyBaseObject_Type
PyErr_Format
PyObject_GetAttrString
PyLong_AsLong
_Py_Dealloc
PyExc_ValueError
PyErr_SetString
_Py_NoneStruct
PyExc_RuntimeError
PyObject_Hash
PyTraceBack_Here
PyLong_FromLong
_PyThreadState_UncheckedGet
PyUnicode_AsUTF8AndSize
PyLong_FromSsize_t
PyErr_NormalizeException
PyImport_ImportModuleLevelObject
PyNumber_Divmod
PyImport_ImportModule
PyExc_DeprecationWarning
PyLong_AsSsize_t
PyFrame_New
PyFunction_Type
PyErr_PrintEx
PyObject_SetAttrString
PyDict_GetItemString
PyErr_WarnEx
PyUnicode_Decode
PyErr_Occurred
kernel32
InitializeSListHead
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
IsDebuggerPresent
DisableThreadLibraryCalls
SetUnhandledExceptionFilter
vcruntime140
__std_type_info_destroy_list
memset
_except_handler4_common
memcpy
api-ms-win-crt-string-l1-1-0
isspace
strncmp
isdigit
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_cexit
_execute_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
Exports
Exports
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ