824cc504c5bf722c7dbf2fb3ea570d9962c863bd2241c63b202a8927183a40ddN

Sharing

Copy URL Twitter E-mail

General

Target

824cc504c5bf722c7dbf2fb3ea570d9962c863bd2241c63b202a8927183a40ddN
Size

24KB
MD5

26297d24a9a2b863cf0fc86f301d4d70
SHA1

75184672e68d49fa461ae813edbaf46aa074ceee
SHA256

824cc504c5bf722c7dbf2fb3ea570d9962c863bd2241c63b202a8927183a40dd
SHA512

33455b7b02e0b060fbad37a27e63fb6cafcbb50c222230b52a9a9bb8b4599194851d7d4cbf791769afdda1f069623efcc474dd4cbc126e251c79cdf4ca58317d
SSDEEP

384:SyJ5+bxwa4bZL78luGBst4WN+lOzamXoPbnbLCvcgk5nnEqe2F:SGOxgbKQ4n3mUbbfgk9E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
824cc504c5bf722c7dbf2fb3ea570d9962c863bd2241c63b202a8927183a40ddN

Files

824cc504c5bf722c7dbf2fb3ea570d9962c863bd2241c63b202a8927183a40ddN
.dll windows:6 windows x64 arch:x64

82b3d350f0d9c693abb9e1029ed65213

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\bld\pywin32_1695973736049\work\build\temp.win-amd64-cpython-39\Release\_winxptheme.pdb

Imports

uxtheme

GetCurrentThemeName
SetWindowTheme
IsAppThemed
GetWindowTheme
CloseThemeData
DrawThemeBackground
IsThemeActive
OpenThemeData
DrawThemeText
EnableTheming
IsThemeDialogTextureEnabled
EnableThemeDialogTexture
GetThemeBackgroundContentRect
GetThemeAppProperties
GetThemeBackgroundExtent

python39

_Py_BuildValue_SizeT
PyErr_Occurred
PyEval_SaveThread
PyLong_FromLong
_Py_NoneStruct
PyDict_SetItemString
PyErr_SetString
PyErr_Format
PyLong_AsUnsignedLongMask
PyModule_GetDict
_PyArg_ParseTuple_SizeT
PyModule_Create2
PyExc_TypeError
PyEval_RestoreThread

pywintypes39

?PyWinObject_AsHANDLE@@YAHPEAU_object@@PEAPEAX@Z
??1PyHANDLE@@UEAA@XZ
?PyWinGlobals_Ensure@@YAHXZ
?PyWinExc_ApiError@@3PEAU_object@@EA
?PyWin_SetAPIError@@YAPEAU_object@@PEADJ@Z
?PyWinObject_FreeWCHAR@@YAXPEA_W@Z
?PyWinObject_FromOLECHAR@@YAPEAU_object@@PEB_W@Z
?PyWinObject_AsWCHAR@@YAHPEAU_object@@PEAPEA_WHPEAK@Z
?PyHANDLEType@@3U_typeobject@@A
??0PyHANDLE@@QEAA@PEAX@Z

kernel32

RtlVirtualUnwind
RtlLookupFunctionEntry
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlCaptureContext

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_terminate
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__std_type_info_destroy_list
__current_exception
__current_exception_context
memset
__C_specific_handler

api-ms-win-crt-heap-l1-1-0

free
malloc
_callnewh

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e
_seh_filter_dll
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
_initialize_narrow_environment
_initialize_onexit_table
_configure_narrow_argv

Exports

Exports

PyInit__winxptheme

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

82b3d350f0d9c693abb9e1029ed65213

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

uxtheme

python39

pywintypes39

kernel32

vcruntime140_1

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 10KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 1024B - Virtual size: 2KB

.pdata Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 156B

.text
Size: 11KB - Virtual size: 10KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 1024B - Virtual size: 2KB

.pdata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 156B