b27bb9c9516a6c50b85df0871e468b2b9ce7d8778dfea013cd96c1b0298f4829N

Sharing

Copy URL Twitter E-mail

General

Target

b27bb9c9516a6c50b85df0871e468b2b9ce7d8778dfea013cd96c1b0298f4829N
Size

42KB
MD5

949def8c5c77bc724e60840f4f464ed0
SHA1

2fed8211506163c3e95b4bbd3a1ed7722e70285f
SHA256

b27bb9c9516a6c50b85df0871e468b2b9ce7d8778dfea013cd96c1b0298f4829
SHA512

437763737c97a2a44f8bcbe28aee131c40c7a82b78ba3c0524ece21a9c8cd15a7fd693311e51cca299814f05ee8ef981fe18c5d69e449c4e61d2608ebce643cf
SSDEEP

768:Iy3MVh8Qz5Znp55/wZPCJjE5SWG5ZQxBDiFd/BWs+ovxPv:I2W2k5tp5qC1tWG5ZVws+ov

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b27bb9c9516a6c50b85df0871e468b2b9ce7d8778dfea013cd96c1b0298f4829N

Files

b27bb9c9516a6c50b85df0871e468b2b9ce7d8778dfea013cd96c1b0298f4829N
.dll windows:6 windows x64 arch:x64

b9ef7605ab27a70377979ffa789ad569

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

python310

PyList_New
PyDict_New
PyDict_SetItem
PyDict_Next
PyDict_Size
PyDict_GetItemString
PyDict_SetItemString
_PyDict_GetItem_KnownHash
PyModule_NewObject
PyModule_GetDict
PyModuleDef_Init
PyMethod_New
PyCode_NewWithPosOnlyArgs
PyCode_NewEmpty
PyTraceBack_Here
PyInterpreterState_GetID
PyThreadState_Get
_PyThreadState_UncheckedGet
PyObject_Call
PyObject_CallObject
PyNumber_Index
PyObject_IsSubclass
PyErr_WarnEx
PyErr_SetObject
PyErr_SetString
PyErr_Occurred
PyUnicode_FromFormat
PyErr_GivenExceptionMatches
PyErr_ExceptionMatches
PyException_SetCause
PyTuple_Pack
PyErr_Format
PyOS_snprintf
Py_GetVersion
PyImport_GetModuleDict
PyImport_AddModule
PyImport_ImportModuleLevelObject
PyFrame_New
PyBaseObject_Type
_Py_NoneStruct
Py_OptimizeFlag
PyBytes_Type
PyUnicode_Type
PyLong_Type
_Py_FalseStruct
_Py_TrueStruct
PyTraceBack_Type
PyExc_AttributeError
PyExc_ImportError
PyExc_NameError
PyExc_RuntimeError
PyExc_SystemError
PyExc_TypeError
PyExc_RuntimeWarning
PyUnicode_FromString
PyUnicode_FromStringAndSize
PyBytes_FromStringAndSize
PyObject_GC_Del
PyObject_GC_UnTrack
PyObject_GC_Track
_PyObject_GC_New
PyObject_Free
PyTuple_GetSlice
PyTuple_GetItem
PyTuple_New
PyFloat_FromDouble
PyLong_FromUnsignedLongLong
PyLong_AsSsize_t
PyLong_FromUnsignedLong
PyLong_FromLong
PyUnicode_AsUTF8
_PyUnicode_Ready
PyUnicode_Compare
PyUnicode_Decode
PyErr_NoMemory
PyUnicode_InternFromString
_PyObject_GenericGetAttrWithDict
_PyObject_GetDictPtr
_Py_Dealloc
PyObject_ClearWeakRefs
PyObject_Not
PyObject_IsTrue
PyObject_Hash
PyObject_GenericGetAttr
PyObject_SetAttr
PyObject_GetAttr
PyObject_SetAttrString
PyObject_GetAttrString
PyObject_RichCompare
PyType_Ready
PyMem_Free
PyMem_Realloc
PyErr_Clear
PyMem_Malloc

vcruntime140

__std_type_info_destroy_list
__C_specific_handler
memcmp
strrchr
memset
memcpy

api-ms-win-crt-runtime-l1-1-0

_cexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm

kernel32

IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

Exports

Exports

PyInit_byteswap

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b9ef7605ab27a70377979ffa789ad569

Headers

DLL Characteristics

File Characteristics

Imports

python310

vcruntime140

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 25KB - Virtual size: 25KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 2KB - Virtual size: 3KB

.pdata Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 220B

.text
Size: 25KB - Virtual size: 25KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 2KB - Virtual size: 3KB

.pdata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 220B