153cc4624d79dd5175dba660f890e8f0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

153cc4624d79dd5175dba660f890e8f0N.exe
Size

177KB
MD5

153cc4624d79dd5175dba660f890e8f0
SHA1

b2557c8dd974106c2fbe49a9b0d50d1f00aac747
SHA256

b93b974ecd9ac22e0f537ad6dcdbd32621a61a82087c464cd5e315efdb89a027
SHA512

fecfbb2c43c8b6a326f7e9951df28b0f30e9df76e704c7d54754da1620f46880aef10cc59aa56ddfd7a87fba03a91efd05c710e60de12e6c65977baa5bebc575
SSDEEP

3072:d1RqPPllbXb4Snk9OnjHecdkHPJ8knzZeiQ3S8u9YqD88IYZTL:/0tBb4SpjHeceSknzQO8u9Yu88IYZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
153cc4624d79dd5175dba660f890e8f0N.exe

Files

153cc4624d79dd5175dba660f890e8f0N.exe
.dll windows:6 windows x86 arch:x86

997a7d81c23bfda0bcda9fddfe94e0c2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

python310

PyFrame_GetBack
PyFrame_GetCode
PyExc_IndexError
PyExc_ImportError
PyCapsule_SetPointer
_Py_TrueStruct
PyExc_SystemError
PyObject_SetItem
PyException_SetCause
PyInterpreterState_Get
PyException_SetContext
PyUnicode_FromString
PyEval_AcquireThread
_PyType_Lookup
PyGILState_GetThisThreadState
PyObject_Repr
PyByteArray_Type
PyNumber_Float
PyType_Type
PyEval_RestoreThread
_PyObject_GetDictPtr
PyDict_New
PyBytes_Size
PyCapsule_GetName
PyCapsule_New
PyException_SetTraceback
PyThread_tss_get
PyTuple_Size
PyErr_Clear
PyObject_GetAttrString
PyType_Ready
PyModule_Create2
PyObject_ClearWeakRefs
PyLong_AsLong
PyObject_CallFunctionObjArgs
PyErr_Fetch
PyModule_AddObject
PyCapsule_GetPointer
PyTuple_GetItem
PyUnicode_AsUTF8String
PyCapsule_Type
PyErr_Restore
PyType_IsSubtype
PyFloat_Type
_Py_FalseStruct
PyThreadState_New
PyDict_Type
PyErr_Format
PyDict_Next
PyExc_ValueError
PyErr_WriteUnraisable
PyErr_SetString
PyByteArray_AsString
PyDict_Size
PyTuple_New
_Py_NoneStruct
PyBytes_AsStringAndSize
PyGILState_Release
PyFloat_AsDouble
PyFrame_GetLineNumber
PyCapsule_GetContext
Py_GetVersion
PyDict_GetItemWithError
PyExc_MemoryError
PyInstanceMethod_Type
PyObject_GC_UnTrack
PyObject_SetAttrString
PyExc_RuntimeError
_PyThreadState_UncheckedGet
PyEval_SaveThread
PyUnicode_AsUTF8AndSize
PyUnicode_DecodeUTF8
PyErr_Occurred
PyErr_NormalizeException
PyBytes_AsString
PyThreadState_Clear
PyImport_ImportModule
PyObject_Str
PyExc_TypeError
_Py_Dealloc
PyThreadState_DeleteCurrent
PyNumber_Long
PyNumber_Check
PyCapsule_SetContext
PyThreadState_Get
PyWeakref_NewRef
PyGILState_Ensure
PyByteArray_Size
_Py_NotImplementedStruct
PyProperty_Type
PyIndex_Check
PyObject_HasAttrString
PyObject_CallObject
PyThread_tss_set
PyCMethod_New
PyTuple_SetItem
PyMem_Free
PyObject_IsInstance
PyCFunction_Type
PyDict_Copy
PyExc_OverflowError
PyInstanceMethod_New
PyMem_Calloc
PyBaseObject_Type
PyInterpreterState_GetDict
PyUnicode_AsEncodedString
PyDict_DelItemString
PyThread_tss_create

msvcp140

?__ExceptionPtrRethrow@@YAXPBX@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrCompare@@YA_NPBX0@Z
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrToBool@@YA_NPBX@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrCreate@@YAXPAX@Z

kernel32

GetCurrentThreadId
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitOnceComplete
InitOnceBeginInitialize
GetCurrentProcess

vcruntime140

__std_exception_destroy
__std_exception_copy
__std_type_info_compare
_purecall
__std_type_info_hash
__std_type_info_name
__std_terminate
strchr
memcpy
__CxxFrameHandler3
__std_type_info_destroy_list
__current_exception
__current_exception_context
_CxxThrowException
_except_handler4_common
memset
memmove
memchr
__RTDynamicCast

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_invalid_parameter_noinfo_noreturn
_cexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
abort
_initterm_e
_initterm
terminate

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

api-ms-win-crt-utility-l1-1-0

srand
rand

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
__acrt_iob_func

api-ms-win-crt-string-l1-1-0

_strdup
strncmp

api-ms-win-crt-math-l1-1-0

ceil
_libm_sse2_sqrt_precise

Exports

Exports

PyInit_ruge_stuben

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

997a7d81c23bfda0bcda9fddfe94e0c2

Headers

DLL Characteristics

File Characteristics

Imports

python310

msvcp140

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 132KB - Virtual size: 131KB

.rdata Size: 35KB - Virtual size: 34KB

.data Size: 2KB - Virtual size: 3KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 132KB - Virtual size: 131KB

.rdata
Size: 35KB - Virtual size: 34KB

.data
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 6KB - Virtual size: 6KB