076281ccb64ccd0e985f4dda74a214a1bc9d3c9fc072b8d202988029f839574a

Sharing

Copy URL Twitter E-mail

General

Target

076281ccb64ccd0e985f4dda74a214a1bc9d3c9fc072b8d202988029f839574a
Size

69KB
MD5

a4b0e73b21ea32a0ce79ad7be5ddf153
SHA1

3194af45766c6d626a7be51655ca46e7769e5322
SHA256

076281ccb64ccd0e985f4dda74a214a1bc9d3c9fc072b8d202988029f839574a
SHA512

035f747c6f00f1e0f220980d886e39c403fbd6949eb742f03e65d20590a059442c21b58c7f919316c8fdbcba36480c1acb5bf8f0a245b9b663b81e1db38d9c09
SSDEEP

768:4bzZgS69sDpasYMRNL3iaAa4PrJ1A3ZlA6C0ePQGM1gCoWYJte+I9qJq6JJ6666/:K9z3b3U7A3ZlAtIGUoc9qHuG6nN2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
076281ccb64ccd0e985f4dda74a214a1bc9d3c9fc072b8d202988029f839574a

Files

076281ccb64ccd0e985f4dda74a214a1bc9d3c9fc072b8d202988029f839574a
.dll windows:4 windows x86 arch:x86

eec9e861665c362fe2e2810f227a6576

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libpython3.9

PyBuffer_Release
PyBytes_FromStringAndSize
PyBytes_Type
PyCallable_Check
PyCapsule_Import
PyDict_Copy
PyDict_DelItem
PyDict_GetItemWithError
PyDict_Items
PyDict_Keys
PyDict_New
PyDict_Next
PyDict_SetItem
PyDict_Type
PyDict_Update
PyErr_Clear
PyErr_ExceptionMatches
PyErr_Format
PyErr_NewException
PyErr_NoMemory
PyErr_Occurred
PyErr_SetNone
PyErr_SetObject
PyErr_SetString
PyErr_WarnEx
PyExc_AttributeError
PyExc_ImportError
PyExc_IndexError
PyExc_RuntimeError
PyExc_RuntimeWarning
PyExc_StopIteration
PyExc_SyntaxError
PyExc_TypeError
PyExc_ValueError
PyFloat_Type
PyImport_ImportModule
PyIndex_Check
PyList_Append
PyList_New
PyList_SetItem
PyList_SetSlice
PyList_Type
PyLong_AsSsize_t
PyLong_FromLong
PyLong_FromSsize_t
PyMem_Free
PyMem_Malloc
PyMem_Realloc
PyModule_AddObject
PyModule_AddType
PyModule_Create2
PyModule_GetState
PyNumber_Add
PyNumber_AsSsize_t
PyNumber_Index
PyObject_CallFunctionObjArgs
PyObject_CallNoArgs
PyObject_ClearWeakRefs
PyObject_Free
PyObject_GC_Del
PyObject_GC_Track
PyObject_GC_UnTrack
PyObject_GenericGetAttr
PyObject_GetAttrString
PyObject_GetBuffer
PyObject_IsTrue
PyObject_Malloc
PyObject_Realloc
PyObject_RichCompareBool
PyObject_SelfIter
PyObject_SetAttrString
PyObject_VectorcallMethod
PySequence_Fast
PySlice_AdjustIndices
PySlice_Type
PySlice_Unpack
PyState_FindModule
PyThreadState_Get
PyTuple_New
PyTuple_Pack
PyType_GenericAlloc
PyType_IsSubtype
PyType_Ready
PyUnicode_AsEncodedString
PyUnicode_AsUTF8
PyUnicode_AsUTF8AndSize
PyUnicode_DecodeUTF8
PyUnicode_FromFormat
PyUnicode_FromString
PyUnicode_FromStringAndSize
PyUnicode_Join
PyUnicode_New
PyUnicode_Type
Py_ReprEnter
Py_ReprLeave
_PyArg_BadArgument
_PyArg_CheckPositional
_PyArg_ParseTupleAndKeywords_SizeT
_PyArg_ParseTuple_SizeT
_PyArg_UnpackKeywords
_PyBytes_Resize
_PyObject_CallFunction_SizeT
_PyObject_CallMethodIdObjArgs
_PyObject_GC_New
_PyObject_GetAttrId
_PyObject_LookupAttrId
_PyObject_MakeTpCall
_PyObject_SetAttrId
_PyTrash_begin
_PyTrash_end
_PyUnicode_FromId
_PyUnicode_Ready
_Py_BuildValue_SizeT
_Py_CheckFunctionResult
_Py_Dealloc
_Py_HashSecret
_Py_NoneStruct

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
Sleep
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

_amsg_exit
_initterm
_iob
_lock
_unlock
abort
calloc
free
fwrite
memcpy
memmove
realloc
strcmp
strlen
strncat
strncmp
vfprintf

Exports

Exports

PyInit__elementtree

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 144B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 103B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eec9e861665c362fe2e2810f227a6576

Headers

DLL Characteristics

File Characteristics

Imports

libpython3.9

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 43KB - Virtual size: 42KB

.data Size: 3KB - Virtual size: 2KB

.rdata Size: 6KB - Virtual size: 5KB

.eh_fram Size: 8KB - Virtual size: 7KB

.bss Size: - Virtual size: 144B

.edata Size: 512B - Virtual size: 103B

.idata Size: 5KB - Virtual size: 4KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 43KB - Virtual size: 42KB

.data
Size: 3KB - Virtual size: 2KB

.rdata
Size: 6KB - Virtual size: 5KB

.eh_fram
Size: 8KB - Virtual size: 7KB

.bss
Size: - Virtual size: 144B

.edata
Size: 512B - Virtual size: 103B

.idata
Size: 5KB - Virtual size: 4KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.reloc
Size: 2KB - Virtual size: 1KB