PyInit__distance_wrap
Static task
static1
Behavioral task
behavioral1
Sample
343ad6cdf5f79f2883ee5f13a1f070312da51ba5d12c000a55349fd5babf578c.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
343ad6cdf5f79f2883ee5f13a1f070312da51ba5d12c000a55349fd5babf578c.dll
Resource
win10v2004-20240611-en
General
-
Target
343ad6cdf5f79f2883ee5f13a1f070312da51ba5d12c000a55349fd5babf578c.exe
-
Size
54KB
-
MD5
b91af89ca24537c376aa3a3347bb6f60
-
SHA1
b4068ff43bfe168d27d1fb26263629f5a23bc896
-
SHA256
343ad6cdf5f79f2883ee5f13a1f070312da51ba5d12c000a55349fd5babf578c
-
SHA512
02902400daa8d09a33d6e8f85c0bcb22c37eda940258ace677ca6bdfe39c8f196905146c0614e084bad7f69fc0ae5102b6e43d187d6ca889cb49e9773f874f6a
-
SSDEEP
1536:/Wu5DF07MC7JbhLNXJLnSk+AaMGbxpx0sT9nRgCLfTpn6bRVMdKPEo9f:/WutF07MqJbhLNXJLnSk+AaMGbxpx0sK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 343ad6cdf5f79f2883ee5f13a1f070312da51ba5d12c000a55349fd5babf578c.exe
Files
-
343ad6cdf5f79f2883ee5f13a1f070312da51ba5d12c000a55349fd5babf578c.exe.dll windows:5 windows x86 arch:x86
669d807643d4ecd16664406200b206cc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
python34
PyModule_Create2
PyErr_Print
PyArg_ParseTupleAndKeywords
PyErr_NoMemory
PyArg_ParseTuple
PyEval_SaveThread
PyEval_RestoreThread
Py_BuildValue
PyImport_ImportModule
PyExc_ImportError
PyErr_SetString
PyObject_GetAttrString
PyExc_AttributeError
PyCapsule_Type
PyExc_RuntimeError
PyCapsule_GetPointer
PyErr_Format
msvcr100
_crt_debugger_hook
_CIpow
free
calloc
memcpy
_CIsin
_CIcos
_CItan
_CIsinh
_CIcosh
_CItanh
floor
ceil
_CIsqrt
_CIlog10
_CIlog
_CIexp
_CIasin
_CIacos
_CIatan
_CIfmod
_copysign
modf
ldexp
frexp
_isnan
_finite
_statusfp2
_clearfp
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
kernel32
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
Exports
Exports
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ