b20d6ed7cbf9a5681537477c8ce792e69d1b485e032bbb32d4f1d708ba13082b

Sharing

Copy URL

Twitter E-mail

General

Target

b20d6ed7cbf9a5681537477c8ce792e69d1b485e032bbb32d4f1d708ba13082b
Size

28KB
MD5

f4b978347865190b3a9d2f5faa651626
SHA1

cf00ab8f50ce8df91780b462e5a8fa3242c293ef
SHA256

b20d6ed7cbf9a5681537477c8ce792e69d1b485e032bbb32d4f1d708ba13082b
SHA512

88b13ee2fa735be0c186d62702f438674c837645e37aa51823490ae63e48921d72effce3a996190b2063106fe6506f6468c5d8c9f4caf6f72d7b239aba123680
SSDEEP

384:GHJBtzblaXEow5b5LPDVT/fvg+qUB5Zn0ot7It7j3aznEFFAo0tq0ubfylct:KdqEN7vVT/fvrqUB5Zn09UznroK/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b20d6ed7cbf9a5681537477c8ce792e69d1b485e032bbb32d4f1d708ba13082b

Files

b20d6ed7cbf9a5681537477c8ce792e69d1b485e032bbb32d4f1d708ba13082b
.dll windows:4 windows x86 arch:x86

f0d2b60a91184ebd03f64b6cbc3ec410

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libpython3.9

PyErr_SetString
PyExc_IndexError
PyExc_RuntimeError
PyExc_TypeError
PyList_Append
PyList_SetSlice
PyModuleDef_Init
PyModule_AddObject
PyObject_RichCompareBool
PyUnicode_FromString
_PyArg_CheckPositional
_Py_Dealloc
_Py_NoneStruct

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
Sleep
TlsGetValue
VirtualProtect
VirtualQuery

api-ms-win-crt-environment-l1-1-0

__p__environ
__p__wenviron

api-ms-win-crt-heap-l1-1-0

_set_new_mode
calloc
free

api-ms-win-crt-private-l1-1-0

memcpy

api-ms-win-crt-runtime-l1-1-0

__p___argc
__p___argv
__p___wargv
_configure_narrow_argv
_configure_wide_argv
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_exit
_initialize_narrow_environment
_initialize_onexit_table
_initialize_wide_environment
_initterm
_register_onexit_function
abort

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vfwprintf
fwrite

api-ms-win-crt-string-l1-1-0

strlen
strncmp

api-ms-win-crt-time-l1-1-0

__daylight
__timezone
__tzname
_tzset

Exports

Exports

PyInit__heapq

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 140B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f0d2b60a91184ebd03f64b6cbc3ec410

Headers

DLL Characteristics

File Characteristics

Imports

libpython3.9

kernel32

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 380B

.rdata Size: 9KB - Virtual size: 9KB

.eh_fram Size: 3KB - Virtual size: 2KB

.bss Size: - Virtual size: 140B

.edata Size: 512B - Virtual size: 96B

.idata Size: 2KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.reloc Size: 1024B - Virtual size: 624B

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 380B

.rdata
Size: 9KB - Virtual size: 9KB

.eh_fram
Size: 3KB - Virtual size: 2KB

.bss
Size: - Virtual size: 140B

.edata
Size: 512B - Virtual size: 96B

.idata
Size: 2KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.reloc
Size: 1024B - Virtual size: 624B