e92f9b8f567a0f3aeddf4013f1e3df89885a6c06814d835bb40154d492cc83c1

Sharing

Copy URL Twitter E-mail

General

Target

e92f9b8f567a0f3aeddf4013f1e3df89885a6c06814d835bb40154d492cc83c1
Size

67KB
MD5

d7e50c303aef9a781c0880f67c01738c
SHA1

267a7f7b8d7673614f6c1156be45f68ce984c681
SHA256

e92f9b8f567a0f3aeddf4013f1e3df89885a6c06814d835bb40154d492cc83c1
SHA512

d105cb06f5522523d27cf573f2ed6f590c5ec8957544693811e5298d4dbf423a2464ab8cfd58ecad91ec141a4f63d1a99b46e95568c73c4476268d3ec1ab860b
SSDEEP

768:PnxiWGEYAEJ9zVamLpmcprpiGC1T/u2125TEetojW2nxz44+sfL6JJ666666666l:IWVebL1pw25TEeui2YYP5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e92f9b8f567a0f3aeddf4013f1e3df89885a6c06814d835bb40154d492cc83c1

Files

e92f9b8f567a0f3aeddf4013f1e3df89885a6c06814d835bb40154d492cc83c1
.dll windows:4 windows x86 arch:x86

0e891fbccbde30be52047c501b49a46b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libpython3.9

PyArg_ParseTupleAndKeywords
PyDict_Next
PyDict_SetItem
PyDict_SetItemString
PyDict_Size
PyErr_Clear
PyErr_ExceptionMatches
PyErr_Fetch
PyErr_Format
PyErr_NewException
PyErr_NoMemory
PyErr_Occurred
PyErr_SetNone
PyErr_SetString
PyExc_MemoryError
PyExc_RuntimeError
PyExc_TypeError
PyExc_ValueError
PyImport_ImportModule
PyIndex_Check
PyInterpreterState_Get
PyInterpreterState_GetID
PyInterpreterState_Head
PyInterpreterState_Next
PyInterpreterState_ThreadHead
PyList_Insert
PyList_New
PyLong_AsLongLong
PyLong_AsLongLongAndOverflow
PyLong_FromLongLong
PyMem_Free
PyMem_Malloc
PyModule_Create2
PyModule_GetDict
PyNumber_Check
PyObject_CallFunctionObjArgs
PyObject_GetAttrString
PyObject_Hash
PyObject_RichCompare
PyRun_StringFlags
PyThreadState_Get
PyThreadState_GetFrame
PyThreadState_GetInterpreter
PyThreadState_Next
PyThreadState_Swap
PyThread_acquire_lock
PyThread_allocate_lock
PyThread_free_lock
PyThread_release_lock
PyType_IsSubtype
PyType_Ready
PyUnicode_AsUTF8
PyUnicode_AsUTF8AndSize
PyUnicode_FromFormat
PyUnicode_FromString
PyUnicode_InternFromString
Py_EndInterpreter
_PyCrossInterpreterData_NewObject
_PyCrossInterpreterData_RegisterClass
_PyCrossInterpreterData_Release
_PyInterpreterID_LookUp
_PyInterpreterID_New
_PyInterpreterID_Type
_PyInterpreterState_GetIDObject
_PyInterpreterState_GetMainModule
_PyInterpreterState_RequireIDRef
_PyObject_CheckCrossInterpreterData
_PyObject_GetCrossInterpreterData
_PyObject_New
_PyType_Name
_Py_Dealloc
_Py_FalseStruct
_Py_NewInterpreter
_Py_NoneStruct
_Py_NotImplementedStruct
_Py_TrueStruct

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__mb_cur_max
_amsg_exit
_errno
_initterm
_iob
_lock
_unlock
abort
atoi
calloc
fputc
free
fwrite
localeconv
malloc
memcpy
memset
realloc
setlocale
strchr
strcpy
strerror
strlen
strncmp
vfprintf
wcslen

libgcc_s_dw2-1

__udivdi3
__umoddi3

Exports

Exports

PyInit__xxsubinterpreters

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 115B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0e891fbccbde30be52047c501b49a46b

Headers

DLL Characteristics

File Characteristics

Imports

libpython3.9

kernel32

msvcrt

libgcc_s_dw2-1

Exports

Exports

Sections

.text Size: 41KB - Virtual size: 41KB

.data Size: 1KB - Virtual size: 1KB

.rdata Size: 9KB - Virtual size: 9KB

.eh_fram Size: 6KB - Virtual size: 6KB

.bss Size: - Virtual size: 2KB

.edata Size: 512B - Virtual size: 115B

.idata Size: 4KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 41KB - Virtual size: 41KB

.data
Size: 1KB - Virtual size: 1KB

.rdata
Size: 9KB - Virtual size: 9KB

.eh_fram
Size: 6KB - Virtual size: 6KB

.bss
Size: - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 115B

.idata
Size: 4KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.reloc
Size: 2KB - Virtual size: 1KB