PyInit_dfitpack
Static task
static1
Behavioral task
behavioral1
Sample
1e93b7cb8062e9f7b6d6d7615fa0609b7a5e4d15aaa33378567f39a4941c36e2.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1e93b7cb8062e9f7b6d6d7615fa0609b7a5e4d15aaa33378567f39a4941c36e2.dll
Resource
win10v2004-20240508-en
General
-
Target
1e93b7cb8062e9f7b6d6d7615fa0609b7a5e4d15aaa33378567f39a4941c36e2.exe
-
Size
112KB
-
MD5
8b8fc9cded3c5378ad45c6ee632d8890
-
SHA1
220f770fab8046083bb3e004d7493014ea352d27
-
SHA256
1e93b7cb8062e9f7b6d6d7615fa0609b7a5e4d15aaa33378567f39a4941c36e2
-
SHA512
7afc500f7ed79062070d973db3e0c0ef309d0ff07973ed44296901630d4f7ff8905c6a49c132728a4eeab16a768d10af2824fb9635d17e4f305f2c5ae8f87670
-
SSDEEP
3072:AzmpwIFL3N6KW2Vw1NjztS4Ax1Q3ht4b:wIFLdVsSvx1Q3ht
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e93b7cb8062e9f7b6d6d7615fa0609b7a5e4d15aaa33378567f39a4941c36e2.exe
Files
-
1e93b7cb8062e9f7b6d6d7615fa0609b7a5e4d15aaa33378567f39a4941c36e2.exe.dll windows:5 windows x86 arch:x86
1ac88a33a774ec5efd8cfcb074f7f3a9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
libdfitpack.fxqee4fiykojuwurkxl62f5h33zyyvvn.gfortran-win32
ord479
ord474
ord480
ord486
ord375
ord299
ord374
ord300
ord332
ord373
ord377
ord309
ord478
ord484
ord314
ord481
ord313
ord483
ord310
ord324
ord482
python34
PyUnicode_FromStringAndSize
PyErr_NoMemory
PyMem_Malloc
PyExc_TypeError
PyUnicode_FromFormat
PyCapsule_New
PyObject_GenericGetAttr
PyUnicode_Concat
PyExc_ValueError
PyDict_DelItemString
PyOS_snprintf
PyMem_Free
_PyObject_New
PyDict_New
PyModule_Create2
PyErr_Print
PyModule_GetDict
PyBytes_FromString
PyDict_SetItemString
PyUnicode_FromString
PyErr_NewException
PyDict_GetItemString
PyObject_SetAttrString
_Py_NoneStruct
PyArg_ParseTupleAndKeywords
PyEval_SaveThread
PyEval_RestoreThread
Py_BuildValue
PyFloat_Type
PyNumber_Float
PyLong_AsLong
PyNumber_Long
PyComplex_Type
PyType_IsSubtype
PySequence_Check
PySequence_GetItem
PyErr_Clear
PyErr_Occurred
PyImport_ImportModule
PyExc_ImportError
PyErr_SetString
PyObject_GetAttrString
PyExc_AttributeError
PyCapsule_Type
PyExc_RuntimeError
PyCapsule_GetPointer
PyErr_Format
PyType_Type
msvcr100
_crt_debugger_hook
free
sprintf
fprintf
__iob_func
memcpy
memset
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
malloc
kernel32
EncodePointer
DecodePointer
InterlockedExchange
Sleep
InterlockedCompareExchange
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Exports
Exports
Sections
.text Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ