a9dd273f0de873849adecd2fc269b7f6352c590d132f92bdd6652158f66782d3

Sharing

Copy URL Twitter E-mail

General

Target

a9dd273f0de873849adecd2fc269b7f6352c590d132f92bdd6652158f66782d3
Size

14KB
MD5

af1b1080a32611120ed733c2e499532c
SHA1

3a3b0e5197b085ca4c4d4e5f9b62812b086f528f
SHA256

a9dd273f0de873849adecd2fc269b7f6352c590d132f92bdd6652158f66782d3
SHA512

83c6143aacfb33476c337aa8c8c35f68d088853de17bd977da77fd06c726d5ef2a4adf9ca0d73973e7a1632abc40cea6eb30f545a2a98f84b2ea0a2be57ecf20
SSDEEP

192:lDeNXzAMxo1NQfPcufnkm4f+Naa7A9I8cqg:lyTxBPnb57A9IQg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9dd273f0de873849adecd2fc269b7f6352c590d132f92bdd6652158f66782d3

Files

a9dd273f0de873849adecd2fc269b7f6352c590d132f92bdd6652158f66782d3
.dll windows:6 windows x64 arch:x64

59e45cf0e07865f73187ac2dc2f95ca2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

python311

_Py_Dealloc
_Py_BuildValue_SizeT
_PyArg_ParseTuple_SizeT
PyDict_Size
PyErr_SetString
PyObject_CallFunctionObjArgs
PyExc_ValueError
PyDict_Next
PyList_New
PyModule_Create2
PyObject_GetAttrString
PyList_Append
PyTuple_Size
PyMem_Free
PyErr_NoMemory
PyBytes_FromStringAndSize
PyExc_TypeError
PyObject_IsTrue
PyMem_Malloc
PyLong_AsLong
_PyArg_ParseTupleAndKeywords_SizeT
PyErr_Occurred
PyImport_ImportModule

kernel32

GetCurrentThreadId
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
GetCurrentProcessId
QueryPerformanceCounter
RtlCaptureContext

vcruntime140

__std_type_info_destroy_list
memset
__C_specific_handler
memcpy

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-string-l1-1-0

strncmp
strnlen

api-ms-win-crt-convert-l1-1-0

strtol

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_cexit
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_initialize_onexit_table

Exports

Exports

PyInit__objects

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

59e45cf0e07865f73187ac2dc2f95ca2

Headers

DLL Characteristics

File Characteristics

Imports

python311

kernel32

vcruntime140

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 1024B - Virtual size: 528B

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 68B

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 1024B - Virtual size: 528B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 68B