PyInit_bit_generator
Static task
static1
Behavioral task
behavioral1
Sample
9a47755991dd8c67e94bc40de9d74699554161b2569c6912837e282aae372f89.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
9a47755991dd8c67e94bc40de9d74699554161b2569c6912837e282aae372f89.dll
Resource
win10v2004-20240508-en
General
-
Target
9a47755991dd8c67e94bc40de9d74699554161b2569c6912837e282aae372f89
-
Size
144KB
-
MD5
faa516a787db761f1eec94c76b719674
-
SHA1
2c1aa9557bcc08d1d9be013ec02fe75a3602cf89
-
SHA256
9a47755991dd8c67e94bc40de9d74699554161b2569c6912837e282aae372f89
-
SHA512
76bf19272b87ba3b94bebc1978ccb1dc112b4703ff642626c6f8870a95f6b1f46cd3b0137dfcc9413f0ab7086ff850a79df18960ccea9cacfa66f4d6049958d4
-
SSDEEP
3072:mKmBzla6WiD9Yw2qsSBdsmZOTZFZ42+WarahA2+WarahDr8S5pRH42Flo:KaihnsSL+FZ42+WarahA2+WarahDr8Sj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9a47755991dd8c67e94bc40de9d74699554161b2569c6912837e282aae372f89
Files
-
9a47755991dd8c67e94bc40de9d74699554161b2569c6912837e282aae372f89.dll windows:6 windows x86 arch:x86
0535bb43c6b704526ea45a6d282788c9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
python310
PyUnicode_Decode
PyUnicode_Concat
PyUnicode_Join
PyUnicode_Compare
PyUnicode_Format
PyUnicode_New
_PyUnicode_Ready
_PyUnicode_FastCopyCharacters
PyUnicode_AsUTF8
PyLong_FromLong
PyLong_FromUnsignedLong
PyLong_FromSsize_t
PyLong_AsLong
PyLong_AsSsize_t
PyLong_AsUnsignedLong
PyLong_FromLongLong
PyLong_FromString
PyFloat_FromDouble
PyTuple_New
PyTuple_GetItem
PyTuple_GetSlice
PyTuple_Pack
PyList_New
PyList_Append
PyList_SetSlice
PyList_AsTuple
PyDict_New
PyDict_GetItemWithError
PyDict_SetItem
PyDict_DelItem
PyDict_Next
PyDict_Size
PyDict_GetItemString
PyDict_SetItemString
_PyDict_GetItem_KnownHash
_PyDict_SetItem_KnownHash
PyCMethod_New
PyModule_NewObject
PyModule_GetDict
PyModule_GetName
PyModuleDef_Init
PyMethod_New
PyCapsule_New
PyCapsule_GetPointer
PyCapsule_GetName
PyCapsule_IsValid
PyCode_NewWithPosOnlyArgs
PyCode_NewEmpty
PyTraceBack_Here
PyInterpreterState_GetID
PyThreadState_Get
_PyThreadState_UncheckedGet
PyObject_Call
PyObject_CallObject
PyObject_Size
PyObject_GetItem
PyObject_SetItem
PyObject_Format
PyObject_GetIter
PyNumber_Add
PyNumber_Multiply
PyNumber_And
PyNumber_Index
PyNumber_Long
PyNumber_InPlaceAdd
PyUnicode_FromOrdinal
PyNumber_InPlaceFloorDivide
PySequence_GetSlice
PySequence_Tuple
PySequence_Contains
PyObject_IsInstance
PyObject_IsSubclass
PyObject_VectorcallDict
PyObject_GetBuffer
PyBuffer_Release
PyErr_WarnEx
PyErr_WarnFormat
PyErr_SetObject
PyErr_SetString
PyErr_Occurred
PyErr_Clear
PyErr_GivenExceptionMatches
PyErr_ExceptionMatches
PyErr_NormalizeException
PyException_SetTraceback
PyException_SetCause
PyErr_NoMemory
PyErr_Format
PyOS_snprintf
Py_GetVersion
Py_EnterRecursiveCall
Py_LeaveRecursiveCall
PyImport_GetModuleDict
PyImport_GetModule
PyImport_AddModule
PyImport_ImportModule
PyImport_ImportModuleLevelObject
PyFrame_New
PyType_Type
PyBaseObject_Type
_Py_NoneStruct
Py_OptimizeFlag
PyUnicode_Type
PyLong_Type
_Py_FalseStruct
_Py_TrueStruct
PyFloat_Type
PyTuple_Type
PyList_Type
PyDict_Type
PyCFunction_Type
PyMethod_Type
PyCapsule_Type
PyTraceBack_Type
PyExc_Exception
PyExc_StopIteration
PyExc_AttributeError
PyExc_ImportError
PyExc_ModuleNotFoundError
PyExc_IndexError
PyExc_KeyError
PyExc_NameError
PyExc_OverflowError
PyExc_RuntimeError
PyExc_NotImplementedError
PyExc_SystemError
PyExc_TypeError
PyExc_ValueError
PyExc_DeprecationWarning
PyExc_RuntimeWarning
PyObject_GenericGetAttr
PyUnicode_InternFromString
PyUnicode_FromFormat
PyUnicode_Resize
PyUnicode_FromString
PyUnicode_FromStringAndSize
PyBytes_FromStringAndSize
PyObject_GC_IsFinalized
PyObject_GC_Del
PyObject_GC_UnTrack
PyObject_GC_Track
_PyObject_GC_New
PyGC_Disable
PyGC_Enable
PyObject_Free
PyObject_Malloc
_PyObject_GenericGetAttrWithDict
PyObject_CallFinalizerFromDealloc
_PyObject_NextNotImplemented
_PyObject_GetDictPtr
_PyType_Lookup
_Py_Dealloc
PyObject_ClearWeakRefs
PyObject_Not
PyObject_Hash
PyObject_IsTrue
PyObject_SetAttr
PyObject_GetAttr
PyObject_SetAttrString
PyObject_GetAttrString
PyObject_RichCompareBool
PyObject_RichCompare
PyObject_Repr
PyType_Modified
PyType_Ready
PyType_IsSubtype
PyMem_Free
PyMem_Realloc
PyNumber_InPlaceMultiply
PyMem_Malloc
vcruntime140
strchr
strrchr
memcpy
memset
__std_type_info_destroy_list
_except_handler4_common
api-ms-win-crt-heap-l1-1-0
malloc
free
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_cexit
_initterm
kernel32
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
Exports
Exports
Sections
.text Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ