7757880341b44add3f0aa115c5a66231bedbeec54a9e50afa1f2377bdfbc886eN

Sharing

Copy URL Twitter E-mail

General

Target

7757880341b44add3f0aa115c5a66231bedbeec54a9e50afa1f2377bdfbc886eN
Size

78KB
MD5

569f0f8473d4d2769af744e14651a810
SHA1

e3def8809ae1f4460165c0d048060f821311f702
SHA256

7757880341b44add3f0aa115c5a66231bedbeec54a9e50afa1f2377bdfbc886e
SHA512

0111a3dcd270bba7bd784f6beabeb4b2ee2b317d5ada0999b3a8dc4f24b53a21debf565a5ad2a8488ac10bf85efdf6f80fc9f675f83d9b395453fdaf49316d54
SSDEEP

1536:fIlzTnQy3S7yo7e725rIFwV7xFLGlgn8VGygFzkC:AlzTfC2r25rICVbOgn8VGd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7757880341b44add3f0aa115c5a66231bedbeec54a9e50afa1f2377bdfbc886eN

Files

7757880341b44add3f0aa115c5a66231bedbeec54a9e50afa1f2377bdfbc886eN
.dll windows:6 windows x86 arch:x86

201b7796c11c4fdad0c52f970028e50b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

python38

PyExc_OverflowError
_Py_Dealloc
PyTuple_GetItem
PyImport_GetModuleDict
PyModule_GetDict
PyObject_Free
PyErr_ExceptionMatches
PyObject_GC_Del
PyLong_AsLong
PyObject_ClearWeakRefs
PyObject_Not
PyUnicode_AsUTF8
PyUnicode_FromFormat
PyList_New
PyImport_AddModule
PyType_Ready
PyObject_GetAttrString
PyErr_Clear
PyList_Append
PyBytes_Type
PyObject_RichCompareBool
PyUnicode_Decode
PyCode_New
PyException_SetTraceback
PyCapsule_New
_PyObject_GenericGetAttrWithDict
PyDict_SetItem
PyDict_New
PyUnicode_Type
PyObject_CallFinalizerFromDealloc
_PyDict_GetItem_KnownHash
PyNumber_Index
PyUnicode_AsWideChar
PyList_Type
PyErr_NoMemory
PyModule_NewObject
PyObject_GetItem
PyModuleDef_Init
PyObject_GC_Track
PyBytes_FromStringAndSize
PyDict_DelItem
PyUnicode_Compare
PyExc_TypeError
PyMem_Realloc
PyCFunction_NewEx
_Py_tracemalloc_config
PyObject_IsTrue
PyExc_NameError
PyTuple_Pack
_PyByteArray_empty_string
PyMem_Malloc
PyExc_IndexError
PyExc_ImportError
_PyTraceMalloc_NewReference
_Py_TrueStruct
PyUnicode_DecodeASCII
PyUnicode_Join
_PyObject_GC_New
PyType_Modified
PyEval_EvalFrameEx
PyUnicode_FromString
_PyType_Lookup
PyObject_Size
PyObject_Call
PyByteArray_Type
PyEval_RestoreThread
PyUnicode_FromStringAndSize
_PyObject_GetDictPtr
_Py_FalseStruct
PyTuple_Type
PyObject_RichCompare
PyErr_Format
PyDict_Next
_Py_CheckRecursiveCall
PyEval_EvalCodeEx
PyErr_WarnFormat
PyErr_SetString
PyUnicode_FromWideChar
PyTuple_GetSlice
PyExc_AttributeError
PyFrame_Type
PyDict_Size
PyDict_SetItemString
PyTuple_New
_Py_NoneStruct
PyBytes_AsStringAndSize
PyBytes_FromString
PyObject_GetAttr
Py_GetVersion
PyInterpreterState_GetID
PyObject_Hash
PyObject_GC_UnTrack
PyLong_FromLong
PyObject_SetAttrString
PyMethod_New
PyExc_RuntimeError
_PyThreadState_UncheckedGet
PyEval_SaveThread
PyTraceBack_Here
PyObject_GenericGetAttr
PyLong_FromSsize_t
PyType_GetFlags
PyErr_Occurred
PyErr_NormalizeException
PyImport_ImportModuleLevelObject
PyExc_DeprecationWarning
PyType_IsSubtype
PyLong_Type
PyLong_AsSsize_t
PyExc_SystemError
PyFrame_New
PyFunction_Type
PyErr_WarnEx
PyLong_AsUnsignedLong
PyErr_GivenExceptionMatches
PyCode_NewEmpty
PyErr_SetObject
_Py_CheckRecursionLimit
PyThreadState_Get
PyOS_snprintf
PyCFunction_Type
PyUnicode_InternFromString
PyObject_SetAttr
_PyDict_NewPresized
PyMethod_Type
PyDict_GetItemString
PyBaseObject_Type

kernel32

ReadFile
CancelIo
WriteFile
DeviceIoControl
WaitForSingleObject
CreateFileW
MultiByteToWideChar
FormatMessageW
GetLastError
CloseHandle
LoadLibraryW
ResetEvent
GetOverlappedResult
GetProcAddress
FreeLibrary
WideCharToMultiByte
CreateEventA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
TerminateProcess

vcruntime140

strchr
wcsstr
__std_type_info_destroy_list
memset
_except_handler4_common
memcpy

api-ms-win-crt-heap-l1-1-0

calloc
malloc
free

api-ms-win-crt-convert-l1-1-0

wcstol

api-ms-win-crt-string-l1-1-0

wcsncpy
_wcsdup
towupper

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_seh_filter_dll
_initterm
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_cexit
_configure_narrow_argv

Exports

Exports

PyInit_hid
hid_close
hid_enumerate
hid_error
hid_exit
hid_free_enumeration
hid_get_device_info
hid_get_feature_report
hid_get_indexed_string
hid_get_input_report
hid_get_manufacturer_string
hid_get_product_string
hid_get_report_descriptor
hid_get_serial_number_string
hid_init
hid_open
hid_open_path
hid_read
hid_read_timeout
hid_send_feature_report
hid_set_nonblocking
hid_version
hid_version_str
hid_winapi_descriptor_reconstruct_pp_data
hid_winapi_get_container_id
hid_write

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

201b7796c11c4fdad0c52f970028e50b

Headers

DLL Characteristics

File Characteristics

Imports

python38

kernel32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 50KB - Virtual size: 49KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 7KB - Virtual size: 8KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 50KB - Virtual size: 49KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 7KB - Virtual size: 8KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 4KB - Virtual size: 4KB