43697a33fc81462d8e3ac85c73ce8b67c79d9e6d79ff18c57b1bee8a4aec6587[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

43697a33fc81462d8e3ac85c73ce8b67c79d9e6d79ff18c57b1bee8a4aec6587.exe
Size

19KB
MD5

9c7567cd86ee7f17c4f25bacb7ac3480
SHA1

8f59fda0ef3a4c7d8d4c596c73aa884015165a90
SHA256

43697a33fc81462d8e3ac85c73ce8b67c79d9e6d79ff18c57b1bee8a4aec6587
SHA512

fc15f4171673994f4ba195c89e4d068b16dae47beefa593baa1feba11e2a22ce2232dd0ccfe8987a69a3071c05c707075e58480dc99bc03ae7b1d3da9ff93409
SSDEEP

384:r04FlJxEQwWyxAN4l1TCxbnfWYP8nzwneM5tECK0trsrhJYQjoI6Ak:H/K3xHlt++nzU3HkqryY8oI6Ak

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43697a33fc81462d8e3ac85c73ce8b67c79d9e6d79ff18c57b1bee8a4aec6587.exe

Files

43697a33fc81462d8e3ac85c73ce8b67c79d9e6d79ff18c57b1bee8a4aec6587.exe
.dll windows:6 windows x64 arch:x64

39d01f10d3ad530df20f0bed3eadda36

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\db4\build\S\VS1264R\build\python\src\external_python\PCBuild\amd64\_ctypes_test.pdb

Imports

oleaut32

SysAllocString

python36

_Py_NoneStruct
PyArg_ParseTuple
PyModule_Create2

msvcr120

strchr
strtok
printf
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
malloc
__crt_debugger_hook
__crtUnhandledException
sqrt
__crtCaptureCurrentContext
__crtCapturePreviousContext
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
__clean_type_info_names_internal
qsort
free
vprintf
memcpy
__C_specific_handler
__crtTerminateProcess

kernel32

GetCurrentProcessId
IsProcessorFeaturePresent
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
IsDebuggerPresent
DecodePointer
EncodePointer
QueryPerformanceCounter

Exports

Exports

GetRectangle
GetString
KeepObject
PointInRect
PyInit__ctypes_test
ReturnRect
TwoOutArgs
_py_func
_py_func_si
_testfunc_D_bhilfD
_testfunc_ai8
_testfunc_byval
_testfunc_c_p_p
_testfunc_callback_i_if
_testfunc_callback_q_qf
_testfunc_callback_with_pointer
_testfunc_callfuncp
_testfunc_cbk_large_struct
_testfunc_cbk_reg_double
_testfunc_cbk_reg_int
_testfunc_d_bhilfd
_testfunc_deref_pointer
_testfunc_f_bhilfd
_testfunc_i_bhilfd
_testfunc_large_struct_update_value
_testfunc_p_p
_testfunc_piunk
_testfunc_q_bhilfd
_testfunc_q_bhilfdq
_testfunc_v
an_integer
bottom
getSPAMANDEGGS
get_an_integer
get_strchr
integrate
last_tf_arg_s
last_tf_arg_u
left
library_get
my_free
my_qsort
my_sqrt
my_strchr
my_strdup
my_strtok
my_wcsdup
my_wcslen
myprintf
ret_2h_func
ret_8i_func
right
s_ret_2h_func
s_ret_8i_func
s_tf_B
s_tf_D
s_tf_H
s_tf_I
s_tf_L
s_tf_Q
s_tf_b
s_tf_bB
s_tf_bD
s_tf_bH
s_tf_bI
s_tf_bL
s_tf_bQ
s_tf_bb
s_tf_bd
s_tf_bf
s_tf_bh
s_tf_bi
s_tf_bl
s_tf_bq
s_tf_d
s_tf_f
s_tf_h
s_tf_i
s_tf_l
s_tf_q
s_tv_i
set_bitfields
testfunc_DDD
testfunc_Ddd
testfunc_array
testfunc_iii
tf_B
tf_D
tf_H
tf_I
tf_L
tf_Q
tf_b
tf_bB
tf_bD
tf_bH
tf_bI
tf_bL
tf_bQ
tf_bb
tf_bd
tf_bf
tf_bh
tf_bi
tf_bl
tf_bq
tf_d
tf_f
tf_h
tf_i
tf_l
tf_q
top
tv_i
unpack_bitfields

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

39d01f10d3ad530df20f0bed3eadda36

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

oleaut32

python36

msvcr120

kernel32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 1024B - Virtual size: 528B

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 56B

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 1024B - Virtual size: 528B

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 56B