74938dc2dfffc1035c723a491ca0551ece9847359f6664a8e597403d8e058164N

Sharing

Copy URL

Twitter E-mail

General

Target

74938dc2dfffc1035c723a491ca0551ece9847359f6664a8e597403d8e058164N
Size

246KB
MD5

13159ecc16e040c8033ec6ccdd5e0450
SHA1

f3736f481fb5cbd9d03f297021c97dc2008703e9
SHA256

74938dc2dfffc1035c723a491ca0551ece9847359f6664a8e597403d8e058164
SHA512

0d5e0004aa23f340facfba9ebd4def2f7df67e3f5cafb4c6c71d69bd459888838f751c4234af0def66f2463ca49ac8d09e4884f9dfcfee310d7c962b33dc64c3
SSDEEP

6144:euQ5uFZrw0iEspbZYb1K8Dyw0jwTMTSP/:euQ5qZrYZYJ8jw4T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74938dc2dfffc1035c723a491ca0551ece9847359f6664a8e597403d8e058164N

Files

74938dc2dfffc1035c723a491ca0551ece9847359f6664a8e597403d8e058164N
.dll windows:6 windows x64 arch:x64

20bbe557ca79cbe965b307ad0adb7d36

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

python311

PyDict_New
PyDict_SetItem
PyDict_GetItemString
PyDict_SetItemString
_PyDict_GetItem_KnownHash
PyModule_NewObject
PyModule_GetDict
PyModuleDef_Init
PyCapsule_New
PyCapsule_GetPointer
PyTraceBack_Here
PyErr_WarnEx
PyErr_WarnFormat
PyModule_AddObject
Py_EnterRecursiveCall
Py_LeaveRecursiveCall
PyEval_SaveThread
PyEval_RestoreThread
PyImport_GetModuleDict
PyImport_GetModule
PyImport_AddModule
PyImport_ImportModule
PyImport_ImportModuleLevelObject
PyObject_Call
PyObject_CallObject
PyObject_GetItem
PyNumber_Subtract
PyNumber_Long
PyUnicode_FromStringAndSize
PyList_New
PyObject_IsSubclass
PyVectorcall_Function
PyObject_VectorcallDict
PyFrame_New
PyBaseObject_Type
_Py_NoneStruct
PyExc_Exception
PyExc_AttributeError
PyExc_ImportError
PyExc_ModuleNotFoundError
PyExc_NameError
PyExc_OverflowError
PyExc_RuntimeError
PyExc_SystemError
PyExc_TypeError
PyExc_ValueError
PyExc_DeprecationWarning
PyLong_Type
_Py_FalseStruct
_Py_TrueStruct
PyFloat_Type
PyTuple_Type
PyList_Type
PyCFunction_Type
PyMethod_Type
PyCapsule_Type
PyTraceBack_Type
Py_Version
PyBytes_FromStringAndSize
PyTuple_Pack
PyTuple_New
PyFloat_FromDouble
PyLong_FromString
PyLong_AsUnsignedLongLong
PyLong_AsLongLong
PyLong_FromUnsignedLongLong
PyLong_FromLongLong
PyLong_AsUnsignedLong
PyLong_AsLong
PyLong_FromSsize_t
PyLong_FromUnsignedLong
PyLong_FromLong
PyOS_snprintf
PyErr_Format
PyException_SetCause
PyException_GetTraceback
PyException_SetTraceback
PyErr_NormalizeException
PyErr_ExceptionMatches
PyErr_GivenExceptionMatches
PyErr_Clear
PyErr_Occurred
PyErr_SetString
PyErr_SetObject
_PyThreadState_UncheckedGet
PyThreadState_Get
PyInterpreterState_GetID
PyCode_NewEmpty
PyUnicode_AsUTF8
_PyUnicode_FastCopyCharacters
_PyUnicode_Ready
PyUnicode_New
PyUnicode_Join
PyUnicode_Decode
PyUnicode_InternFromString
PySequence_GetSlice
PyUnicode_FromFormat
_PyObject_GenericGetAttrWithDict
_PyObject_GetDictPtr
_PyType_Lookup
_Py_Dealloc
PyObject_Not
PyObject_IsTrue
PyObject_Hash
PyObject_GenericGetAttr
PyObject_SetAttr
PyObject_GetAttr
PyObject_SetAttrString
PyObject_GetAttrString
PyObject_RichCompare
PyType_IsSubtype
PyMem_Realloc
PyNumber_InPlaceSubtract
PyMem_Malloc

vcruntime140

memcpy
memset
__C_specific_handler
__std_type_info_destroy_list

api-ms-win-crt-math-l1-1-0

expm1
log1p
log1pf
acos
ceil
sqrtf
sqrt
powf
pow
logf
log
fmod
floor
expf
exp
cos

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_cexit
_initterm

kernel32

IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

Exports

Exports

PyInit__bounded_integers
random_beta
random_binomial
random_bounded_bool_fill
random_bounded_uint16_fill
random_bounded_uint32_fill
random_bounded_uint64
random_bounded_uint64_fill
random_bounded_uint8_fill
random_buffered_bounded_bool
random_buffered_bounded_uint16
random_buffered_bounded_uint32
random_buffered_bounded_uint8
random_chisquare
random_exponential
random_f
random_gamma
random_gamma_f
random_geometric
random_geometric_search
random_gumbel
random_interval
random_laplace
random_logistic
random_lognormal
random_logseries
random_multinomial
random_negative_binomial
random_noncentral_chisquare
random_noncentral_f
random_normal
random_pareto
random_poisson
random_positive_int
random_positive_int32
random_positive_int64
random_power
random_rayleigh
random_standard_cauchy
random_standard_exponential
random_standard_exponential_f
random_standard_exponential_fill
random_standard_exponential_fill_f
random_standard_exponential_inv_fill
random_standard_exponential_inv_fill_f
random_standard_gamma
random_standard_gamma_f
random_standard_normal
random_standard_normal_f
random_standard_normal_fill
random_standard_normal_fill_f
random_standard_t
random_standard_uniform
random_standard_uniform_f
random_standard_uniform_fill
random_standard_uniform_fill_f
random_triangular
random_uint
random_uniform
random_vonmises
random_wald
random_weibull
random_zipf

Sections

.text
Size: 201KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

20bbe557ca79cbe965b307ad0adb7d36

Headers

DLL Characteristics

File Characteristics

Imports

python311

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 201KB - Virtual size: 200KB

.rdata Size: 39KB - Virtual size: 39KB

.data Size: 512B - Virtual size: 6KB

.pdata Size: 4KB - Virtual size: 3KB

.reloc Size: 512B - Virtual size: 80B

.text
Size: 201KB - Virtual size: 200KB

.rdata
Size: 39KB - Virtual size: 39KB

.data
Size: 512B - Virtual size: 6KB

.pdata
Size: 4KB - Virtual size: 3KB

.reloc
Size: 512B - Virtual size: 80B