687205a558a96447072b2cdf91996f93549b2296e6bcb9ee2e991443a33d063f

Sharing

Copy URL Twitter E-mail

General

Target

687205a558a96447072b2cdf91996f93549b2296e6bcb9ee2e991443a33d063f
Size

12KB
MD5

7fc13ad96bf8a8ea7070a5651cc95c5c
SHA1

e0d61145c846412b1febad6312e52d3468a0182a
SHA256

687205a558a96447072b2cdf91996f93549b2296e6bcb9ee2e991443a33d063f
SHA512

070553e5babc82ea592bc747a522d441a4c0e1cf21ae9a5a7d8a49a547c25658cc9e4abfeefe4e745e0a5ec31a3f4d875d5af2126d4d674876841d5dc28de6b4
SSDEEP

192:BjaIZpkgsV8UvI1V3oayTraIQYjZmYmi3/uv3URwzazKuIV:I6kuUvSV3/2a+mYmM/ueK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
687205a558a96447072b2cdf91996f93549b2296e6bcb9ee2e991443a33d063f

Files

687205a558a96447072b2cdf91996f93549b2296e6bcb9ee2e991443a33d063f
.dll windows:6 windows x86 arch:x86

90a3c4e51003aa49cd9dc9c5e667520d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

O:\src\pywin32\build\temp.win32-3.9\Release\timer.pdb

Imports

user32

KillTimer
SetTimer

python39

PyGILState_Ensure
PyModule_GetDict
PyGILState_Release
PyDict_DelItem
PyDict_SetItem
PyDict_GetItem
PyDict_New
PyBool_FromLong
PyBytes_FromString
_Py_Dealloc
PyCallable_Check
PyErr_WarnEx
PyErr_SetString
PyArg_ParseTuple
PyExc_RuntimeWarning
PyExc_TypeError
PyEval_RestoreThread
PyEval_SaveThread
PyEval_CallObjectWithKeywords
PyErr_Print
PyModule_Create2
PyDict_SetItemString
Py_BuildValue

pywintypes39

?PyWinGlobals_Ensure@@YAHXZ
?PyWinLong_FromVoidPtr@@YAPAU_object@@PBX@Z
?PyWinLong_AsVoidPtr@@YAHPAU_object@@PAPAX@Z
?PyWin_SetAPIError@@YAPAU_object@@PADJ@Z
?PyWinExc_ApiError@@3PAU_object@@A

kernel32

QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
GetModuleHandleW
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetCurrentProcessId

vcruntime140

__CxxFrameHandler3
__telemetry_main_return_trigger
__std_type_info_destroy_list
memset
_except_handler4_common
__telemetry_main_invoke_trigger

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_seh_filter_dll
terminate
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_narrow_environment
_initterm
_initialize_onexit_table

Exports

Exports

PyInit_timer

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

90a3c4e51003aa49cd9dc9c5e667520d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

user32

python39

pywintypes39

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 1016B

.gfids Size: 512B - Virtual size: 28B

.reloc Size: 1024B - Virtual size: 680B

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1016B

.gfids
Size: 512B - Virtual size: 28B

.reloc
Size: 1024B - Virtual size: 680B