2fa87d9fa9fac0d02e91e34f554cfdb87a6d3e53f468eea57b95d4c4078434c4

Sharing

Copy URL

Twitter E-mail

General

Target

2fa87d9fa9fac0d02e91e34f554cfdb87a6d3e53f468eea57b95d4c4078434c4
Size

53KB
MD5

ab44a77e361a87d4de86b8086fc1ef3b
SHA1

f94312437d1e79c9cdc39ba3d053309795ac7dba
SHA256

2fa87d9fa9fac0d02e91e34f554cfdb87a6d3e53f468eea57b95d4c4078434c4
SHA512

afd2f578926c722454d715872ee47f0b07ad07556526d7b6bd2d18e1cec17d8b7d3d00bcc08e8f572ee56f7124ad81e520762b4ab1fe165b2bb34b5461db9f82
SSDEEP

768:EAEjy+JIg/XPAVDgHMn31u6UO7CJp2iqqrGEfX1Qx3RS80IqIJOnA:Ezjyn8fi8H8u6RCKg1Qxc80IqIJOnA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fa87d9fa9fac0d02e91e34f554cfdb87a6d3e53f468eea57b95d4c4078434c4

Files

2fa87d9fa9fac0d02e91e34f554cfdb87a6d3e53f468eea57b95d4c4078434c4
.dll windows:6 windows x64 arch:x64

7fce420fc0e74c832cd0e367afb39ecf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\b\abs_e9wvls8ug0\croot\python-split_1679959977679\work\PCbuild\amd64\_asyncio.pdb

Imports

python311

_PyObject_LookupAttrId
PyErr_WriteUnraisable
_PyArg_UnpackKeywords
PyIter_Send
PyExc_ValueError
PyErr_Format
PyModule_AddType
_Py_FalseStruct
PyCoro_Type
PyType_IsSubtype
PyErr_Restore
_Py_Dealloc
PyObject_Free
PyErr_ExceptionMatches
_PyUnicode_FromId
PyModule_AddObject
PyObject_GC_Del
PyErr_Fetch
PyObject_CallFunctionObjArgs
PyObject_ClearWeakRefs
PyObject_Vectorcall
PyUnicode_FromFormat
PySet_New
PyList_New
PyModule_Create2
_PyObject_GetAttrId
PyType_Ready
PyObject_GetAttrString
PyList_Append
PyObject_RichCompareBool
PyList_SetSlice
PyErr_SetString
PyDict_New
PyUnicode_Type
PyObject_CallMethod
PyObject_CallFinalizerFromDealloc
_PyDict_GetItem_KnownHash
PyObject_VectorcallMethod
PyObject_IsInstance
PyExc_StopIteration
PyContext_CopyCurrent
PyCMethod_New
_PyGen_SetStopIterationValue
_PyRuntime
PyObject_GC_Track
_PyType_Name
_Py_NewReference
_PyObject_New
PyExc_TypeError
PyObject_IsTrue
PyObject_Str
_PyLong_AsInt
PyGen_Type
_PyThreadState_GetDict
_Py_TrueStruct
_PyObject_GC_New
PyTraceBack_Type
_Py_IsFinalizing
PyThreadState_GetID
_PyDict_DelItem_KnownHash
PyUnicode_FromString
PyObject_CallNoArgs
_PyErr_ChainExceptions
PyExc_SystemExit
_PyObject_CallMethodIdObjArgs
PyExc_AttributeError
PySet_Add
PyTuple_New
_Py_NoneStruct
PyExc_KeyboardInterrupt
PyUnicode_FromFormatV
PySet_Contains
_PyDict_SetItemId
Py_BuildValue
PyObject_Hash
PyObject_GC_UnTrack
PyLong_FromLong
PyExc_RuntimeError
_PyDict_GetItemIdWithError
_PyGen_FetchStopIterationValue
PyObject_GenericGetAttr
PyLong_FromSsize_t
PyErr_Occurred
PyObject_SelfIter
PyErr_NormalizeException
PyImport_ImportModule
_PyErr_BadInternalCall
_PyDict_SetItem_KnownHash
_PyArg_CheckPositional
PyType_GenericNew
_PyObject_SetAttrId
PyErr_GivenExceptionMatches
PyObject_CallOneArg
PyErr_SetObject
PyException_GetTraceback
PyException_SetTraceback
Py_GenericAlias

vcruntime140

__C_specific_handler
memset
__std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_initialize_onexit_table
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_cexit
_initialize_narrow_environment

kernel32

IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

Exports

Exports

PyInit__asyncio

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7fce420fc0e74c832cd0e367afb39ecf

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

python311

vcruntime140

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 22KB - Virtual size: 22KB

.rdata Size: 18KB - Virtual size: 17KB

.data Size: 6KB - Virtual size: 7KB

.pdata Size: 2KB - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 1024B - Virtual size: 648B

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 18KB - Virtual size: 17KB

.data
Size: 6KB - Virtual size: 7KB

.pdata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1024B - Virtual size: 648B