89a2e2910752c8b2e693b89db3b04bdd9f6f50b2b0be543b0a04d9973663082eN

Sharing

Copy URL

Twitter E-mail

General

Target

89a2e2910752c8b2e693b89db3b04bdd9f6f50b2b0be543b0a04d9973663082eN
Size

44KB
MD5

d54d94a04b45b25fa892bd3a1094ae70
SHA1

bb51e76fa48e147babd7819ec20a9e6aaaa3baf1
SHA256

89a2e2910752c8b2e693b89db3b04bdd9f6f50b2b0be543b0a04d9973663082e
SHA512

adbd1c9da1d5b95047ff6bc33fca5e8d422c176aa3c817c001ebd52752326a3dc7711d1dd32b913110fc1fed619861ed61bc5702306ad0cb94e8dc91ef8339f2
SSDEEP

768:rjbm/bk4w/ZVtUj5HXEf7Yrd/wmaXIRnNA8uU8cjwk1TLjjUamjABOQZWX:rjbmoD/9U5EjAw9KA8uFcck1XjjUamyS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89a2e2910752c8b2e693b89db3b04bdd9f6f50b2b0be543b0a04d9973663082eN

Files

89a2e2910752c8b2e693b89db3b04bdd9f6f50b2b0be543b0a04d9973663082eN
.dll windows:6 windows x86 arch:x86

dfd97f38b3564639e6289a651f6b9f46

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

sdl2

SDL_GetColorKey
SDL_GetRGBA
SDL_MapRGBA

python311

PyUnicode_FromString
PyEval_RestoreThread
PyList_New
PyUnicode_FromFormat
PyLong_AsLong
PyModule_AddObject
PyCapsule_GetPointer
_Py_Dealloc
PyErr_Format
PyDict_Next
PyModule_Create2
PyObject_CallFunction
PyErr_SetString
PyFloat_FromDouble
PyDict_Size
_Py_NoneStruct
PyMem_RawMalloc
PyExc_MemoryError
Py_BuildValue
PyLong_FromLong
PyExc_RuntimeError
PyEval_SaveThread
PyErr_Occurred
PyObject_CallMethodObjArgs
PyExc_IndexError
PyCapsule_Type
PyExc_TypeError
PyArg_ParseTupleAndKeywords
PyErr_NoMemory
PyObject_IsInstance
PyCapsule_New
PyTuple_Size
PyList_Append
PyObject_GetAttrString
PyExc_ValueError
PyImport_ImportModule
PyType_Ready
PyObject_SetAttr
PyMem_RawFree

kernel32

SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter

vcruntime140

memset
__std_type_info_destroy_list
memcpy
_except_handler4_common

api-ms-win-crt-heap-l1-1-0

malloc
free

api-ms-win-crt-runtime-l1-1-0

_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm

api-ms-win-crt-math-l1-1-0

_CIatan2

Exports

Exports

PyInit_mask

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dfd97f38b3564639e6289a651f6b9f46

Headers

DLL Characteristics

File Characteristics

Imports

sdl2

python311

kernel32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 31KB - Virtual size: 30KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 1024B - Virtual size: 1KB

.gfids Size: 512B - Virtual size: 20B

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 31KB - Virtual size: 30KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 1024B - Virtual size: 1KB

.gfids
Size: 512B - Virtual size: 20B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 2KB - Virtual size: 1KB