PyInit_siplib
Static task
static1
Behavioral task
behavioral1
Sample
8c38eca78962b63347f7461549f8af3fc085a21793d32637dcf0f74a78164d69N.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8c38eca78962b63347f7461549f8af3fc085a21793d32637dcf0f74a78164d69N.dll
Resource
win10v2004-20240802-en
General
-
Target
8c38eca78962b63347f7461549f8af3fc085a21793d32637dcf0f74a78164d69N
-
Size
113KB
-
MD5
2c653dbe2f4132e5a2b8a00483381b90
-
SHA1
1b20262e97f8ec280e746a868b90ba9ed6adc234
-
SHA256
8c38eca78962b63347f7461549f8af3fc085a21793d32637dcf0f74a78164d69
-
SHA512
f5015b67ffda0b91e37f53486aca34c98203802a06de68f6cd711509dd0655d278cf31a0bfbce787b1a959ce28f5906bf15d7f4af956ad898f7691484c0a59ee
-
SSDEEP
1536:oH+keY5KRIxjG7qZnJMDnvtbDwV5kyVS7pWxF2/lwI5ds4z/3IHRwo:CIeK2jLMDnvtHwQ3P5dsm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c38eca78962b63347f7461549f8af3fc085a21793d32637dcf0f74a78164d69N
Files
-
8c38eca78962b63347f7461549f8af3fc085a21793d32637dcf0f74a78164d69N.dll windows:6 windows x64 arch:x64
345cc8d55e0f8a44f20e902c631d6092
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
python312
PyFloat_AsDouble
_PyArg_ParseTupleAndKeywords_SizeT
PyIndex_Check
PyNumber_AsSsize_t
PyObject_IsInstance
PyExc_BufferError
PyExc_IndexError
PyExc_NotImplementedError
PySlice_Type
PyMem_RawMalloc
PyMem_RawFree
PyObject_CheckBuffer
PyObject_GetBuffer
PyBuffer_FillInfo
PyBuffer_Release
PyType_Ready
PyType_Modified
PyObject_SetAttr
PyObject_GenericGetAttr
PyObject_IsTrue
PyCallable_Check
PyType_GetDict
PyObject_Print
PyBytes_FromStringAndSize
PyBytes_FromString
PyUnicode_FromStringAndSize
PyUnicode_FromString
PyUnicode_FromWideChar
PyUnicode_AsWideChar
PyUnicode_AsUTF8String
PyUnicode_DecodeLatin1
PyUnicode_AsLatin1String
PyUnicode_DecodeASCII
PyUnicode_AsASCIIString
PyUnicode_AppendAndDel
PyUnicode_Tailmatch
PyUnicode_Compare
PyUnicode_CompareWithASCIIString
PyUnicode_New
PyUnicode_AsUTF8
PyThreadState_Get
PyGILState_Ensure
PyGILState_Release
PyErr_SetObject
PyErr_NormalizeException
PyErr_NoMemory
PyOS_snprintf
PyLong_FromSize_t
PyLong_FromSsize_t
PyLong_AsLong
PyLong_FromVoidPtr
PyLong_FromLongLong
_Py_FalseStruct
PyTuple_New
PyTuple_Pack
PyList_New
PyErr_SetString
PyFloat_FromDouble
PyDict_GetItem
PyDict_SetItem
PyDict_Next
PyDict_Size
PyDict_Contains
PyDict_GetItemString
PyModule_GetDict
PyCapsule_New
PyCapsule_GetPointer
PyCapsule_Import
PyFrame_GetBack
PySlice_Unpack
PySlice_AdjustIndices
PyDescr_NewMethod
PyDictProxy_New
PyErr_WarnEx
_Py_BuildValue_SizeT
PyModule_Create2
PyErr_Print
Py_AtExit
PyEval_GetFrame
PyImport_GetModuleDict
PyImport_ImportModule
PyImport_Import
PyObject_Call
_PyObject_CallFunction_SizeT
PyObject_CallFunctionObjArgs
PySequence_Size
PySequence_GetItem
PyLong_Type
PyBool_Type
PyType_Type
PyBaseObject_Type
_Py_NotImplementedStruct
PyExc_Exception
PyExc_RuntimeError
PyExc_SystemError
PyExc_DeprecationWarning
PyFloat_Type
PyTuple_Type
PyFunction_Type
PyWrapperDescr_Type
PyProperty_Type
PyThread_get_thread_ident
PyLong_AsSsize_t
PyLong_AsVoidPtr
PyCapsule_Type
PyExc_TypeError
PyExc_OverflowError
PyLong_AsUnsignedLongLongMask
PyLong_AsUnsignedLongLong
PyLong_AsLongLong
PyLong_AsUnsignedLongMask
PyLong_AsUnsignedLong
PyErr_ExceptionMatches
PyErr_SetNone
_PyObject_New
PyMem_Free
PyDict_New
PyMethod_Type
PyCFunction_Type
PyExc_NameError
PyObject_CallObject
PyWeakref_GetObject
PyWeakref_NewRef
PyMethod_New
PyTuple_GetSlice
PyBool_FromLong
PyErr_GivenExceptionMatches
PyErr_Restore
PyErr_Fetch
PyObject_GetAttrString
PyType_IsSubtype
PyLong_FromUnsignedLong
PyList_Append
_Py_TrueStruct
PyErr_Clear
PyErr_Occurred
PyExc_AttributeError
PyUnicode_FromFormat
PyObject_GC_UnTrack
PyObject_GetAttr
PyType_GenericAlloc
PyExc_ValueError
_Py_NoneStruct
_PyArg_ParseTuple_SizeT
PyCMethod_New
PyDict_SetItemString
PyLong_FromLong
PyErr_Format
PyLong_FromUnsignedLongLong
_Py_Dealloc
vcruntime140
__std_type_info_destroy_list
__C_specific_handler
memmove
strchr
memset
memcpy
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfprintf
__acrt_iob_func
api-ms-win-crt-utility-l1-1-0
bsearch
api-ms-win-crt-string-l1-1-0
strcmp
api-ms-win-crt-runtime-l1-1-0
_initterm
_cexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
kernel32
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
Exports
Exports
Sections
.text Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ