82886137e2c2eaa62e4738d12fa94b8ebd0bc5f64e966660376447a9f3f945e9

Sharing

Copy URL Twitter E-mail

General

Target

82886137e2c2eaa62e4738d12fa94b8ebd0bc5f64e966660376447a9f3f945e9
Size

82KB
MD5

8b1e6df6524bd18491bdc337e1aa1c00
SHA1

c3ba5345f972a950334810ed017a714843db2c20
SHA256

82886137e2c2eaa62e4738d12fa94b8ebd0bc5f64e966660376447a9f3f945e9
SHA512

433148caba3390bc4a32894dd5c2d59932076946a3833fb79df546f6f03354d0673dd5ac9b38f3f26e6ae887a4b64e17a86c06b8d223d9856fab77e2906d17a1
SSDEEP

1536:vMoQ0oIMpYxc1jrOWcNmziz1jLag4stPmEy49NMMrR1Z0FiV0FimlXq:KNpYiWjLaStPmEtR1Z0FiV0FimlX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82886137e2c2eaa62e4738d12fa94b8ebd0bc5f64e966660376447a9f3f945e9

Files

82886137e2c2eaa62e4738d12fa94b8ebd0bc5f64e966660376447a9f3f945e9
.dll windows:6 windows x64 arch:x64

21b6b604fe1cd0a7efbbe0f61aff828b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

arrow_python

?check_status@internal@py@arrow@@YAHAEBVStatus@3@@Z

arrow

?Defaults@IpcReadOptions@ipc@arrow@@SA?AU123@XZ
??0IpcReadOptions@ipc@arrow@@QEAA@XZ
??1IpcReadOptions@ipc@arrow@@QEAA@XZ
??4IpcReadOptions@ipc@arrow@@QEAAAEAU012@$$QEAU012@@Z
?Open@Reader@feather@ipc@arrow@@SA?AV?$Result@V?$shared_ptr@VReader@feather@ipc@arrow@@@std@@@4@AEBV?$shared_ptr@VRandomAccessFile@io@arrow@@@std@@AEBUIpcReadOptions@34@@Z
??0WriteProperties@feather@ipc@arrow@@QEAA@XZ
?WriteTable@feather@ipc@arrow@@YA?AVStatus@3@AEBVTable@3@PEAVOutputStream@io@3@AEBUWriteProperties@123@@Z
?CopyFrom@Status@arrow@@AEAAXAEBV12@@Z
??4Status@arrow@@QEAAAEAV01@$$QEAV01@@Z
??1Status@arrow@@QEAA@XZ
??0Status@arrow@@QEAA@XZ

python39

PyBytes_AsStringAndSize
PyUnicode_FromStringAndSize
PyUnicode_FromString
PyUnicode_FromFormat
PyUnicode_InternFromString
PyUnicode_Decode
PyUnicode_Concat
PyUnicode_Compare
_PyUnicode_Ready
PyUnicode_AsUTF8
PyLong_FromLong
PyLong_AsLong
PyTuple_New
PyTuple_GetItem
PyTuple_GetSlice
PyTuple_Pack
PyList_New
PyList_Append
PyList_SetSlice
PyList_AsTuple
PyDict_New
PyDict_SetItem
PyDict_DelItem
PyDict_Next
PyDict_Size
PyDict_GetItemString
PyDict_SetItemString
_PyDict_GetItem_KnownHash
PyModule_NewObject
PyModule_GetDict
PyModule_GetName
PyObject_GC_IsFinalized
PyMethod_New
PyCapsule_GetPointer
PyCapsule_GetName
PyCapsule_IsValid
PyCode_NewWithPosOnlyArgs
PyCode_NewEmpty
PyTraceBack_Here
PyInterpreterState_GetID
PyThreadState_Get
PyGILState_Ensure
PyGILState_Release
_PyThreadState_UncheckedGet
PyErr_WarnEx
PyErr_WarnFormat
PyErr_SetObject
PyErr_SetString
PyErr_Occurred
PyErr_Clear
PyErr_Fetch
PyErr_Restore
PyErr_GivenExceptionMatches
PyErr_ExceptionMatches
PyException_SetCause
PyErr_NoMemory
PyErr_Format
PyOS_snprintf
Py_GetVersion
Py_EnterRecursiveCall
Py_LeaveRecursiveCall
PyEval_SaveThread
PyEval_RestoreThread
PyImport_GetModuleDict
PyImport_GetModule
PyImport_AddModule
PyImport_ImportModule
PyImport_ImportModuleLevelObject
PyImport_Import
PyObject_Call
PyObject_CallObject
PyObject_GetItem
PyObject_SetItem
PyObject_GetIter
PyObject_IsSubclass
PyObject_VectorcallDict
PyFrame_New
PyBytes_FromStringAndSize
PyObject_GC_Del
PyObject_GC_UnTrack
PyObject_GC_Track
_PyObject_GC_New
PyObject_Free
PyMem_Free
PyMem_Realloc
PyMem_Malloc
_PyObject_GenericGetAttrWithDict
PyObject_CallFinalizerFromDealloc
_PyObject_GetDictPtr
_PyType_Lookup
_Py_Dealloc
PyObject_ClearWeakRefs
PyObject_Not
PyObject_IsTrue
PyObject_Hash
PyObject_GenericGetAttr
PyObject_SetAttr
PyObject_GetAttr
PyObject_SetAttrString
PyObject_GetAttrString
PyObject_RichCompareBool
PyObject_RichCompare
PyType_Modified
PyType_Ready
PyType_IsSubtype
_Py_NoneStruct
PyBaseObject_Type
PyType_Type
PyExc_RuntimeWarning
PyExc_DeprecationWarning
PyExc_IOError
PyExc_ValueError
PyExc_TypeError
PyExc_SystemError
PyExc_RuntimeError
PyExc_OverflowError
PyExc_NameError
PyExc_MemoryError
PyExc_IndexError
PyExc_ImportError
PyExc_AttributeError
PyExc_ArithmeticError
PyExc_StopIteration
PyExc_Exception
PyTraceBack_Type
PyMethod_Type
PyCFunction_Type
PyList_Type
PyTuple_Type
PyFloat_Type
_Py_TrueStruct
_Py_FalseStruct
PyLong_Type
PyUnicode_Type
_PyByteArray_empty_string
PyByteArray_Type
PyModuleDef_Init

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

memcmp
__std_terminate
strrchr
__std_exception_copy
__std_exception_destroy
memmove
_CxxThrowException
__C_specific_handler
__std_type_info_destroy_list
memset
memcpy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e
_execute_onexit_table
_seh_filter_dll
_initialize_narrow_environment
_cexit
_initialize_onexit_table
_configure_narrow_argv
_invalid_parameter_noinfo_noreturn

api-ms-win-crt-heap-l1-1-0

free
malloc
_callnewh

kernel32

SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
IsDebuggerPresent

Exports

Exports

PyInit__feather

Sections

.text
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

21b6b604fe1cd0a7efbbe0f61aff828b

Headers

DLL Characteristics

File Characteristics

Imports

arrow_python

arrow

python39

msvcp140

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 53KB - Virtual size: 52KB

.rdata Size: 21KB - Virtual size: 21KB

.data Size: 3KB - Virtual size: 6KB

.pdata Size: 2KB - Virtual size: 2KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 332B

.text
Size: 53KB - Virtual size: 52KB

.rdata
Size: 21KB - Virtual size: 21KB

.data
Size: 3KB - Virtual size: 6KB

.pdata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 332B