D:\bld\pywin32_1695973736049\work\build\temp.win-amd64-cpython-39\Release\_winxptheme.pdb
Static task
static1
Behavioral task
behavioral1
Sample
824cc504c5bf722c7dbf2fb3ea570d9962c863bd2241c63b202a8927183a40ddN.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
824cc504c5bf722c7dbf2fb3ea570d9962c863bd2241c63b202a8927183a40ddN.dll
Resource
win10v2004-20240802-en
General
-
Target
824cc504c5bf722c7dbf2fb3ea570d9962c863bd2241c63b202a8927183a40ddN
-
Size
24KB
-
MD5
26297d24a9a2b863cf0fc86f301d4d70
-
SHA1
75184672e68d49fa461ae813edbaf46aa074ceee
-
SHA256
824cc504c5bf722c7dbf2fb3ea570d9962c863bd2241c63b202a8927183a40dd
-
SHA512
33455b7b02e0b060fbad37a27e63fb6cafcbb50c222230b52a9a9bb8b4599194851d7d4cbf791769afdda1f069623efcc474dd4cbc126e251c79cdf4ca58317d
-
SSDEEP
384:SyJ5+bxwa4bZL78luGBst4WN+lOzamXoPbnbLCvcgk5nnEqe2F:SGOxgbKQ4n3mUbbfgk9E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 824cc504c5bf722c7dbf2fb3ea570d9962c863bd2241c63b202a8927183a40ddN
Files
-
824cc504c5bf722c7dbf2fb3ea570d9962c863bd2241c63b202a8927183a40ddN.dll windows:6 windows x64 arch:x64
82b3d350f0d9c693abb9e1029ed65213
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
uxtheme
GetCurrentThemeName
SetWindowTheme
IsAppThemed
GetWindowTheme
CloseThemeData
DrawThemeBackground
IsThemeActive
OpenThemeData
DrawThemeText
EnableTheming
IsThemeDialogTextureEnabled
EnableThemeDialogTexture
GetThemeBackgroundContentRect
GetThemeAppProperties
GetThemeBackgroundExtent
python39
_Py_BuildValue_SizeT
PyErr_Occurred
PyEval_SaveThread
PyLong_FromLong
_Py_NoneStruct
PyDict_SetItemString
PyErr_SetString
PyErr_Format
PyLong_AsUnsignedLongMask
PyModule_GetDict
_PyArg_ParseTuple_SizeT
PyModule_Create2
PyExc_TypeError
PyEval_RestoreThread
pywintypes39
?PyWinObject_AsHANDLE@@YAHPEAU_object@@PEAPEAX@Z
??1PyHANDLE@@UEAA@XZ
?PyWinGlobals_Ensure@@YAHXZ
?PyWinExc_ApiError@@3PEAU_object@@EA
?PyWin_SetAPIError@@YAPEAU_object@@PEADJ@Z
?PyWinObject_FreeWCHAR@@YAXPEA_W@Z
?PyWinObject_FromOLECHAR@@YAPEAU_object@@PEB_W@Z
?PyWinObject_AsWCHAR@@YAHPEAU_object@@PEAPEA_WHPEAK@Z
?PyHANDLEType@@3U_typeobject@@A
??0PyHANDLE@@QEAA@PEAX@Z
kernel32
RtlVirtualUnwind
RtlLookupFunctionEntry
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlCaptureContext
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_terminate
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__std_type_info_destroy_list
__current_exception
__current_exception_context
memset
__C_specific_handler
api-ms-win-crt-heap-l1-1-0
free
malloc
_callnewh
api-ms-win-crt-runtime-l1-1-0
_initterm
_initterm_e
_seh_filter_dll
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
_initialize_narrow_environment
_initialize_onexit_table
_configure_narrow_argv
Exports
Exports
PyInit__winxptheme
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 156B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ