e6c559f7cc4d28675a89a0fb7be3626340e3019993fa224e91b38c6384c2582a

Sharing

Copy URL Twitter E-mail

General

Target

e6c559f7cc4d28675a89a0fb7be3626340e3019993fa224e91b38c6384c2582a
Size

64KB
MD5

5107c12fe2d0bd1aecd4d4de4e9f8d29
SHA1

0bb2be1e17d9547c11977e95bdc77e830c2539ae
SHA256

e6c559f7cc4d28675a89a0fb7be3626340e3019993fa224e91b38c6384c2582a
SHA512

45f3ec918521f1c650609fdbdb2dacf6793940c4c3dfc226dff1654e1ff3f773153358752151a988a71073b0fb55f22c1206ed5f79d14d5931c709687ec273b8
SSDEEP

768:mraFFigONC1BFNmKA9IFpDU6FVeF7Oc3yBAQo7cfv1S+IiItHyE9xJ7Lvtwb4L:VlHBFFAKBrFVed8v1S/tn7ntwb4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e6c559f7cc4d28675a89a0fb7be3626340e3019993fa224e91b38c6384c2582a

Files

e6c559f7cc4d28675a89a0fb7be3626340e3019993fa224e91b38c6384c2582a
.dll windows:6 windows x64 arch:x64

2d77838e5cb779d498c0676c3c606ff5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

libpypy3-c

PyPyModule_AddObject
PyPyModule_GetState
PyPyFloat_AsDouble
PyPyObject_IsInstance
PyPyImport_ImportModule
PyPyModule_Create2
PyPyExc_OverflowError
PyPyLong_AsUnsignedLongLong
PyPyErr_Occurred
PyPyBool_Type
PyPyLong_AsLongLong
PyPyIter_Next
PyPyObject_GetIter
PyPyUnicode_AsUTF8AndSize
PyPyErr_SetString
PyPyNumber_ToBase
PyPyList_Size
PyPyTuple_GetItem
PyPyObject_IsTrue
PyPyList_GetItem
PyPyErr_ExceptionMatches
PyPyDict_GetItem
PyPyMapping_Keys
PyPyList_SetItem
PyPyObject_Str
PyPyModule_AddStringConstant
PyPyLong_FromUnsignedLongLong
PyPyList_Append
PyPyUnicode_FromKindAndData
PyPyCallable_Check
PyPyArg_ParseTupleAndKeywords
PyPyObject_Malloc
PyPyArg_ParseTuple
PyPyDict_New
PyPyObject_CallObject
PyPyExc_TypeError
PyPyFloat_FromDouble
PyPyLong_FromLong
PyPyLong_FromLongLong
PyPyDict_SetItem
PyPyLong_FromString
PyPyUnicode_AsEncodedString
PyPyBytes_Size
PyPyTuple_Pack
_PyPy_TrueStruct
PyPyErr_Format
PyPyBytes_AsString
PyPyUnicode_FromString
_PyPy_Dealloc
PyPyList_New
PyPyObject_HasAttrString
PyPyObject_GetAttrString
PyPyIter_Check
PyPyExc_ValueError
PyPyTuple_Size
PyPyUnicode_AsUTF8String
PyPyObject_Repr
PyPyErr_NoMemory
PyPyUnicode_DecodeUTF8
PyPyObject_Call
PyPyTuple_New
PyPyList_Sort
PyPyObject_CallFunctionObjArgs
_PyPy_FalseStruct
PyPyErr_Clear
_PyPy_NoneStruct
PyPyObject_Free
PyPyErr_NewException
PyPyObject_Realloc

kernel32

GetCurrentProcessId
GetModuleHandleW
CloseHandle
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetProcAddress
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
CreateEventW
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
IsDebuggerPresent
QueryPerformanceCounter

vcruntime140

__C_specific_handler
memset
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__std_type_info_destroy_list
memcpy
memmove

api-ms-win-crt-runtime-l1-1-0

_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
abort

api-ms-win-crt-heap-l1-1-0

realloc
free
malloc
_callnewh

api-ms-win-crt-math-l1-1-0

ceil

Exports

Exports

JSON_DecodeObject
JSON_EncodeObject
PyInit_ujson

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2d77838e5cb779d498c0676c3c606ff5

Headers

DLL Characteristics

File Characteristics

Imports

libpypy3-c

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 43KB - Virtual size: 42KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 1024B - Virtual size: 2KB

.pdata Size: 2KB - Virtual size: 2KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 168B

.text
Size: 43KB - Virtual size: 42KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 1024B - Virtual size: 2KB

.pdata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 168B