PyInit__csparsetools
Static task
static1
Behavioral task
behavioral1
Sample
2730765f4a2606a10d3f6e7bdc52aab0N.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2730765f4a2606a10d3f6e7bdc52aab0N.dll
Resource
win10v2004-20240802-en
General
-
Target
2730765f4a2606a10d3f6e7bdc52aab0N
-
Size
725KB
-
MD5
2730765f4a2606a10d3f6e7bdc52aab0
-
SHA1
62d34894f825e3dc07e4f706f3b19197d1c1170a
-
SHA256
01fc7471df1e3f9d7446e3c7d96552aafa97c5e3334a31211545216dda62aa98
-
SHA512
09a7891329ffd4d8bbb8cb45832db04094709bc09022779a2e3c1beabf7d9487edb193f361c2ac9f0c40216d1790d47bfaf798c945f3bccdca2ca6e0af7b6aae
-
SSDEEP
12288:C42TXiuyQSH1B8D3DmKgoSqxjqJku2ovb:ClX7yQSH1SD3Dm7jajq/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2730765f4a2606a10d3f6e7bdc52aab0N
Files
-
2730765f4a2606a10d3f6e7bdc52aab0N.dll windows:4 windows x64 arch:x64
5a5caf1654ee21ee73071c07caa6c731
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
api-ms-win-crt-heap-l1-1-0
_set_new_mode
calloc
free
malloc
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vfwprintf
fputc
fwrite
api-ms-win-crt-private-l1-1-0
memcmp
memcpy
memmove
strrchr
api-ms-win-crt-string-l1-1-0
memset
strlen
strncmp
wcslen
api-ms-win-crt-convert-l1-1-0
mbrtowc
wcrtomb
api-ms-win-crt-environment-l1-1-0
__p__environ
__p__wenviron
api-ms-win-crt-locale-l1-1-0
localeconv
api-ms-win-crt-runtime-l1-1-0
__p___argc
__p___argv
__p___wargv
_configure_narrow_argv
_configure_wide_argv
_crt_at_quick_exit
_crt_atexit
_errno
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initialize_wide_environment
_initterm
_register_onexit_function
abort
strerror
api-ms-win-crt-time-l1-1-0
__daylight
__timezone
__tzname
_tzset
python312
PyBaseObject_Type
PyBuffer_Release
PyByteArray_Type
PyBytes_FromString
PyBytes_FromStringAndSize
PyBytes_Type
PyCFunction_Type
PyCMethod_New
PyCapsule_GetPointer
PyCapsule_New
PyCapsule_Type
PyCode_NewEmpty
PyComplex_AsCComplex
PyComplex_FromDoubles
PyComplex_Type
PyDescr_IsData
PyDict_Contains
PyDict_DelItem
PyDict_GetItemString
PyDict_GetItemWithError
PyDict_New
PyDict_Next
PyDict_SetItem
PyDict_SetItemString
PyDict_Size
PyDict_Type
PyErr_Clear
PyErr_ExceptionMatches
PyErr_Fetch
PyErr_Format
PyErr_GivenExceptionMatches
PyErr_NoMemory
PyErr_NormalizeException
PyErr_Occurred
PyErr_Restore
PyErr_SetObject
PyErr_SetString
PyErr_WarnEx
PyErr_WarnFormat
PyEval_GetBuiltins
PyExc_AttributeError
PyExc_BufferError
PyExc_DeprecationWarning
PyExc_Exception
PyExc_ImportError
PyExc_IndexError
PyExc_KeyError
PyExc_ModuleNotFoundError
PyExc_NameError
PyExc_NotImplementedError
PyExc_OverflowError
PyExc_RuntimeError
PyExc_RuntimeWarning
PyExc_StopIteration
PyExc_SystemError
PyExc_TypeError
PyExc_UnboundLocalError
PyExc_ValueError
PyExc_ZeroDivisionError
PyException_GetTraceback
PyException_SetTraceback
PyFloat_AsDouble
PyFloat_FromDouble
PyFloat_Type
PyFrame_New
PyGC_Disable
PyGC_Enable
PyGILState_Ensure
PyGILState_Release
PyImport_AddModule
PyImport_GetModule
PyImport_GetModuleDict
PyImport_ImportModule
PyImport_ImportModuleLevelObject
PyIndex_Check
PyInterpreterState_GetID
PyIter_Next
PyList_Append
PyList_AsTuple
PyList_Insert
PyList_New
PyList_Type
PyLong_AsLong
PyLong_AsLongLong
PyLong_AsSsize_t
PyLong_AsUnsignedLong
PyLong_AsUnsignedLongLong
PyLong_FromLong
PyLong_FromLongLong
PyLong_FromSsize_t
PyLong_FromUnsignedLong
PyLong_FromUnsignedLongLong
PyLong_Type
PyMem_Free
PyMem_Malloc
PyMem_Realloc
PyMemoryView_FromObject
PyMethodDescr_Type
PyMethod_New
PyMethod_Type
PyModuleDef_Init
PyModule_GetDict
PyModule_GetName
PyModule_NewObject
PyNumber_Add
PyNumber_InPlaceAdd
PyNumber_InPlaceMultiply
PyNumber_Index
PyNumber_Multiply
PyNumber_Remainder
PyOS_snprintf
PyObject_Call
PyObject_CallFinalizerFromDealloc
PyObject_ClearWeakRefs
PyObject_DelItem
PyObject_Format
PyObject_Free
PyObject_GC_Del
PyObject_GC_IsFinalized
PyObject_GC_Track
PyObject_GC_UnTrack
PyObject_GenericGetAttr
PyObject_GetAttr
PyObject_GetAttrString
PyObject_GetBuffer
PyObject_GetItem
PyObject_GetIter
PyObject_Hash
PyObject_IsSubclass
PyObject_IsTrue
PyObject_Malloc
PyObject_Not
PyObject_RichCompare
PyObject_RichCompareBool
PyObject_SetAttr
PyObject_SetAttrString
PyObject_SetItem
PyObject_Size
PyObject_Str
PyObject_VectorcallDict
PySequence_Contains
PySequence_List
PySequence_Tuple
PySlice_New
PySlice_Type
PyThreadState_Get
PyThread_allocate_lock
PyThread_free_lock
PyTraceBack_Here
PyTuple_GetItem
PyTuple_GetSlice
PyTuple_New
PyTuple_Pack
PyTuple_Size
PyTuple_Type
PyType_IsSubtype
PyType_Modified
PyType_Ready
PyType_Type
PyUnicode_AsUTF8
PyUnicode_Compare
PyUnicode_Concat
PyUnicode_Contains
PyUnicode_Decode
PyUnicode_Format
PyUnicode_FromFormat
PyUnicode_FromOrdinal
PyUnicode_FromString
PyUnicode_FromStringAndSize
PyUnicode_InternFromString
PyUnicode_Join
PyUnicode_New
PyUnicode_Type
PyUnstable_Code_NewWithPosOnlyArgs
PyVectorcall_Function
Py_EnterRecursiveCall
Py_LeaveRecursiveCall
Py_Version
_PyDict_GetItem_KnownHash
_PyDict_NewPresized
_PyList_Extend
_PyObject_GC_New
_PyObject_GenericGetAttrWithDict
_PyObject_GetDictPtr
_PyThreadState_UncheckedGet
_PyType_Lookup
_PyUnicode_FastCopyCharacters
_Py_Dealloc
_Py_FalseStruct
_Py_FatalErrorFunc
_Py_NoneStruct
_Py_TrueStruct
Exports
Exports
Sections
.text Size: 661KB - Virtual size: 660KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 105B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 812B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ