667601a042e25cddc8f0b4e8565b7ab2943fd6e2ecbc72649d0ee827a681e90f

Sharing

Copy URL Twitter E-mail

General

Target

667601a042e25cddc8f0b4e8565b7ab2943fd6e2ecbc72649d0ee827a681e90f
Size

11KB
MD5

d7e5e4f7b7bab18a77bfadd5c2c25380
SHA1

13bf3e1032386c264a6a32b13a4eba2c83f857fb
SHA256

667601a042e25cddc8f0b4e8565b7ab2943fd6e2ecbc72649d0ee827a681e90f
SHA512

a6454f1022fb9d701b972e34989f7de245819c9f14e6ae5098d169cf53d45d600b27c1b53afc72f07a159aa20f67939e83b8ca4f2ab8008c8e6347e497de95e8
SSDEEP

192:ERCh+tYncPavpoPT1PZjcPOtWJ8q5jOY7ny0xQ7G7AArgMVnN8HH:ERG+tYncYu7Xx4J1jHtx0G7AArLn2HH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
667601a042e25cddc8f0b4e8565b7ab2943fd6e2ecbc72649d0ee827a681e90f

Files

667601a042e25cddc8f0b4e8565b7ab2943fd6e2ecbc72649d0ee827a681e90f
.dll windows:6 windows x86 arch:x86

399570d6ae93966cfc14dbfc2ae2eb26

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

python311

PyErr_NoMemory
PyMem_Free
PyTuple_Size
PyList_Append
PyBytes_FromStringAndSize
PyExc_TypeError
PyObject_GetAttrString
PyObject_IsTrue
PyMem_Malloc
_Py_BuildValue_SizeT
PyLong_AsLong
PyObject_CallFunctionObjArgs
_PyArg_ParseTuple_SizeT
_Py_Dealloc
_PyArg_ParseTupleAndKeywords_SizeT
PyDict_Next
PyExc_ValueError
PyErr_SetString
PyDict_Size
PyErr_Occurred
PyModule_Create2
PyList_New
PyImport_ImportModule

kernel32

GetSystemTimeAsFileTime
InitializeSListHead
DisableThreadLibraryCalls
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent

vcruntime140

_except_handler4_common
memset
__std_type_info_destroy_list

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-string-l1-1-0

strncmp
strnlen

api-ms-win-crt-convert-l1-1-0

strtol

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_configure_narrow_argv
_initterm
_initialize_onexit_table
_execute_onexit_table
_cexit
_initterm_e
_initialize_narrow_environment

Exports

Exports

PyInit__objects

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

399570d6ae93966cfc14dbfc2ae2eb26

Headers

DLL Characteristics

File Characteristics

Imports

python311

kernel32

vcruntime140

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 512B

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 512B