9eb17e43229821eb539b335af23ea071b979121f317d2599141dd660d9762e46

Sharing

Copy URL Twitter E-mail

General

Target

9eb17e43229821eb539b335af23ea071b979121f317d2599141dd660d9762e46
Size

12KB
MD5

250685eaa6f517b896cafe6c2e4345bd
SHA1

2252c16cdd437de992abf92681b7a77afc8f263a
SHA256

9eb17e43229821eb539b335af23ea071b979121f317d2599141dd660d9762e46
SHA512

9090ec738b8dd25a333b12b300d740415adf13fc465f76535d0d57ac84177d3cb154d2cc6a990e8ba5185c06cddb823716bf0ee4502e937e967ab3fe4ca3c331
SSDEEP

192:ClzZN4O+HEnoH2uw6Uw9drhG9F8ZyIfjHY8KpPjO+raqhag50BWKcbD/oFDk:CEfHJprhG9dIfeJjdrbhLWBWKiwFD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9eb17e43229821eb539b335af23ea071b979121f317d2599141dd660d9762e46

Files

9eb17e43229821eb539b335af23ea071b979121f317d2599141dd660d9762e46
.dll windows:6 windows x86 arch:x86

3d00e1fbe833f3e249fb9cd2ca2a8fd2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

python39

PyExc_AssertionError
PyLong_FromLong
_Py_NoneStruct
PyErr_SetString
_Py_Dealloc
PyModule_Create2
PyArg_ParseTuple
PyCapsule_Import
PyExc_RuntimeError

kernel32

GetCurrentProcess
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent

vcruntime140

__CxxFrameHandler3
__std_exception_destroy
_CxxThrowException
__std_type_info_destroy_list
memset
_except_handler4_common
__std_exception_copy

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
__acrt_iob_func

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_cexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_initterm
_initterm_e
_configure_narrow_argv

api-ms-win-crt-heap-l1-1-0

free

Exports

Exports

PyInit__test_extension_cpp

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3d00e1fbe833f3e249fb9cd2ca2a8fd2

Headers

DLL Characteristics

File Characteristics

Imports

python39

kernel32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

Exports

Exports

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 1024B - Virtual size: 640B

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 1024B - Virtual size: 640B