0aaf3c13af1bf057468f6e35f6a677fb73c15d20b806238c1ec4d2b2677c3a0a[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

0aaf3c13af1bf057468f6e35f6a677fb73c15d20b806238c1ec4d2b2677c3a0a.exe
Size

2.2MB
MD5

66095559f4986a2b062fa418345cf3c0
SHA1

1f2b034bad7a52946b680f7cfb70ab85e08a81b8
SHA256

0aaf3c13af1bf057468f6e35f6a677fb73c15d20b806238c1ec4d2b2677c3a0a
SHA512

45d4aa029a022cbbbca58372a80a4640dc505c09a3adebf5e552616cf442d768e4205b7f2afd131a848fbe081abed539d005f897edacab3e24f51121630195fc
SSDEEP

49152:YUIgrq1C0ZYCHeglnuZ8mr2XQxhjrkpT9wlB:rIkjYXQjIk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0aaf3c13af1bf057468f6e35f6a677fb73c15d20b806238c1ec4d2b2677c3a0a.exe

Files

0aaf3c13af1bf057468f6e35f6a677fb73c15d20b806238c1ec4d2b2677c3a0a.exe
.dll windows:6 windows x86 arch:x86

c13ac1bd721e3c6c149b114396831bb9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WriteFile
GetLastError
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
ReadFile
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
InitializeCriticalSectionEx
InitializeConditionVariable
WakeConditionVariable
SleepConditionVariableCS
WaitForSingleObjectEx
SetThreadPriority
SetFilePointer
GetFileSizeEx
GetSystemInfo
TlsSetValue
TlsGetValue
TlsAlloc
CreateEventA
WaitForSingleObject
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle
GlobalUnlock
FreeLibrary
GlobalLock
GetProcAddress
LoadLibraryA
GetModuleHandleA
GlobalSize
GetCurrentThreadId

user32

GetMessageA
DispatchMessageA
GetWindowRect
LoadCursorA
GetDC
FillRect
EndPaint
BeginPaint
GetSystemMetrics
ShowWindow
OpenClipboard
SetWindowLongA
CloseClipboard
GetWindowLongA
EnumClipboardFormats
RegisterClassA
DefWindowProcA
CreateWindowExA
TranslateMessage
GetClipboardData
LoadIconA
SetForegroundWindow
InvalidateRect
RegisterClipboardFormatA
ReleaseDC

gdi32

CreateCompatibleBitmap
BitBlt
SelectObject
SetWinMetaFileBits
CreateDIBSection
CreateCompatibleDC
GdiFlush
PlayEnhMetaFile
SetEnhMetaFileBits
GetStockObject
GetDIBits
DeleteEnhMetaFile
GetDeviceCaps
DeleteDC
DeleteObject
CreateDCA
SelectPalette
GetSystemPaletteEntries
StretchDIBits
RealizePalette
StretchBlt
SetDIBColorTable
CreatePalette

python310

PyExc_IndexError
_Py_TrueStruct
PyObject_Print
PyList_SetItem
PyUnicode_FromString
PyExc_TypeError
PyObject_Size
_PyObject_New
PyBytes_FromStringAndSize
PyExc_OSError
PyEval_RestoreThread
PyExc_RuntimeError
PyUnicode_Type
PySequence_Check
PyThreadState_Get
_PyObject_CallFunction_SizeT
PySys_GetObject
PyFile_WriteString
PyErr_Print
PySequence_Size
PyDict_New
PyNumber_AsSsize_t
PyNumber_Check
PyThreadState_Swap
PyIndex_Check
PyCapsule_New
PyErr_Clear
_PyObject_CallMethod_SizeT
PyType_Ready
PyModule_Create2
PyList_New
PyErr_ExceptionMatches
PySequence_Fast
PyObject_GetBuffer
PyLong_AsLong
PyObject_CallFunction
_PyArg_ParseTuple_SizeT
PyObject_CheckBuffer
PyModule_AddObject
Py_BuildValue
PySlice_Unpack
PyObject_Free
PySequence_GetItem
PySlice_Type
PySlice_AdjustIndices
PyArg_ParseTuple
PyExc_MemoryError
PyObject_CallMethod
PyLong_AsSsize_t
PyExc_SystemError
PyObject_IsTrue
PyDict_GetItem
PyList_GetItem
PyBytes_Size
PyTuple_Size
PyModule_GetDict
PyTuple_GetItem
_PyBytes_Resize
PyErr_SetFromErrno
PyErr_Format
PyList_Size
PyErr_NoMemory
_Py_Dealloc
PyType_IsSubtype
PyFloat_Type
_Py_FalseStruct
PyExc_ValueError
PyErr_SetString
PyFloat_FromDouble
PyDict_SetItemString
PyTuple_New
PyLong_AsLongLong
_Py_NoneStruct
PyBytes_AsStringAndSize
PyFloat_AsDouble
PyUnicode_AsLatin1String
PyLong_FromLong
PyEval_SaveThread
PyLong_FromSsize_t
PyErr_Occurred
PyBytes_AsString
_PyErr_BadInternalCall
PyModule_AddIntConstant
_Py_BuildValue_SizeT
PyBool_FromLong
PyBuffer_Release

vcruntime140

longjmp
memset
memmove
_setjmp3
__std_type_info_destroy_list
memcpy
_except_handler4_common

api-ms-win-crt-heap-l1-1-0

_aligned_malloc
_aligned_free
calloc
free
malloc
realloc

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
__acrt_iob_func
_lseek
_write
__stdio_common_vsscanf
__stdio_common_vsnprintf_s
_get_osfhandle
fwrite
fclose
fopen
__stdio_common_vsprintf

api-ms-win-crt-string-l1-1-0

strncmp
_strdup
strncpy

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_initterm
_initterm_e
_configure_narrow_argv
_initialize_narrow_environment
exit
_initialize_onexit_table
_cexit
_execute_onexit_table
_beginthreadex

api-ms-win-crt-math-l1-1-0

lround
fmax
roundf
round
hypot
floor
_libm_sse2_pow_precise
ceil
_libm_sse2_log_precise
_libm_sse2_sin_precise
_libm_sse2_log10_precise
fmin
_libm_sse2_sqrt_precise
_libm_sse2_exp_precise
_CIfmod
_libm_sse2_cos_precise
_CIatan2

api-ms-win-crt-utility-l1-1-0

rand
bsearch
qsort

api-ms-win-crt-environment-l1-1-0

getenv
getenv_s

api-ms-win-crt-convert-l1-1-0

atoi

Exports

Exports

PyInit__imaging

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 501KB - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 264KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c13ac1bd721e3c6c149b114396831bb9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

python310

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-convert-l1-1-0

Exports

Exports

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 501KB - Virtual size: 500KB

.data Size: 12KB - Virtual size: 22KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 264KB - Virtual size: 268KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 501KB - Virtual size: 500KB

.data
Size: 12KB - Virtual size: 22KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 264KB - Virtual size: 268KB