9678b4ee3ff067bd1f9bc5f5261cf75079fff45989274c6e3b65255a0f7608af

Sharing

Copy URL Twitter E-mail

General

Target

9678b4ee3ff067bd1f9bc5f5261cf75079fff45989274c6e3b65255a0f7608af
Size

1.4MB
MD5

95d0c236e95ac93650b90f03306e53e1
SHA1

ed452b4ac7c8cd75f66b2f0fb6f0f2c8add2333c
SHA256

9678b4ee3ff067bd1f9bc5f5261cf75079fff45989274c6e3b65255a0f7608af
SHA512

d7d3ed7c9028f73f08e089fb62721f60df844cd4393766fdc2c9f416e2ffb0386a00963cb9f314b429c23c8212b7251dbc8c6edeaab9e0f10c8c2c2f0ab353d1
SSDEEP

24576:DeQUTHEcJxHjESqLnLNl6KBLeAd1cYs6nPAKZ:AHxJxHYS+pTBLau

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9678b4ee3ff067bd1f9bc5f5261cf75079fff45989274c6e3b65255a0f7608af

Files

9678b4ee3ff067bd1f9bc5f5261cf75079fff45989274c6e3b65255a0f7608af
.dll windows:6 windows x64 arch:x64

a3de6868c53406060078cb4e92475265

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

python312

PySequence_GetItem
PySequence_Size
_PyObject_GetDictPtr
PyUnicode_FromStringAndSize
PySequence_Tuple
PyType_Type
PyNumber_Float
PyByteArray_Type
PyObject_Repr
PyBuffer_Release
PyGILState_GetThisThreadState
_PyType_Lookup
PyEval_AcquireThread
PyLong_FromSize_t
PyUnicode_FromString
PyDict_DelItemString
PyInterpreterState_Get
PyException_SetCause
PyObject_SetItem
PyExc_SystemError
PyThread_tss_create
_Py_TrueStruct
PyCapsule_SetPointer
PyExc_ImportError
PyExc_IndexError
PyFrame_GetCode
PyFrame_GetBack
PyCallable_Check
PyModule_Type
PyUnicode_AsUTF8String
PyObject_Str
PyDict_Copy
PyStaticMethod_Type
PyCapsule_Type
PyThreadState_Clear
PyExc_TypeError
PyThreadState_DeleteCurrent
PyNumber_Long
PyNumber_Check
PyCapsule_SetContext
PyGILState_Ensure
PyByteArray_Size
_Py_NotImplementedStruct
PyIndex_Check
PyProperty_Type
PyObject_HasAttrString
PyObject_CallObject
PyObject_GetItem
PyThread_tss_set
PyNumber_Negative
PyCMethod_New
PyTuple_SetItem
PyMem_Free
PyObject_IsInstance
PyInstanceMethod_New
PyException_SetContext
PyList_GetItem
PyDict_New
PyBytes_Size
PyCapsule_GetName
PyCapsule_New
PyException_SetTraceback
PyThread_tss_get
PyExc_FutureWarning
PyTuple_Size
PyObject_RichCompareBool
PyList_Append
PyErr_Clear
PyObject_GetAttrString
PyType_Ready
PyModule_Create2
PyList_New
PySet_New
PySequence_Check
PyObject_ClearWeakRefs
PyObject_GenericGetDict
PyLong_AsLong
PyObject_CallFunctionObjArgs
PyErr_Fetch
PyModule_AddObject
PyCapsule_GetPointer
PyTuple_GetItem
_Py_Dealloc
PyExc_OverflowError
PyErr_Restore
PyType_IsSubtype
PyMethod_Type
PyFloat_Type
_Py_FalseStruct
PyThreadState_New
PyDict_Type
PyErr_Format
PyDict_Next
PyExc_ValueError
PyNumber_Add
PyErr_WriteUnraisable
PyStaticMethod_New
PyErr_SetString
PyNumber_Multiply
PyByteArray_AsString
PyList_Size
PySet_Add
PyFloat_FromDouble
PyLong_FromLongLong
PyDict_Size
PyObject_GenericSetDict
PyTuple_New
_Py_NoneStruct
PyBytes_AsStringAndSize
PyGILState_Release
PyBytes_FromString
PyFloat_AsDouble
PyFrame_GetLineNumber
PyDict_Contains
PyObject_GetAttr
PyCapsule_GetContext
Py_GetVersion
PyDict_GetItemWithError
PyExc_MemoryError
PyInstanceMethod_Type
PyObject_Hash
PyObject_GC_UnTrack
PyLong_FromLong
PyObject_SetAttrString
PyExc_RuntimeError
_PyThreadState_UncheckedGet
PyEval_SaveThread
PyUnicode_AsUTF8AndSize
PyUnicode_DecodeUTF8
PyLong_FromSsize_t
PyErr_Occurred
PyErr_NormalizeException
PyBytes_AsString
PyImport_ImportModule
PyErr_WarnEx
PyObject_Malloc
PyLong_AsUnsignedLong
PyThreadState_Get
PyWeakref_NewRef
PyCFunction_Type
PyObject_SetAttr
PyExc_BufferError
PyMem_Calloc
PyBaseObject_Type
PyInterpreterState_GetDict
PyUnicode_AsEncodedString
PyUnicode_FromFormat

tket

?get_vertex_ZXGen_ptr@ZXDiagram@zx@tket@@QEBA?AV?$shared_ptr@$$CBVZXGen@zx@tket@@@std@@AEBQEAX@Z
?zx_to_circuit@tket@@YA?AVCircuit@1@AEBVZXDiagram@zx@1@@Z
?q_default_reg@tket@@YAAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?sequence@Rewrite@zx@tket@@SA?AV123@AEBV?$vector@VRewrite@zx@tket@@V?$allocator@VRewrite@zx@tket@@@std@@@std@@@Z
?repeat@Rewrite@zx@tket@@SA?AV123@AEBV123@@Z
?decompose_boxes@Rewrite@zx@tket@@SA?AV123@XZ
?basic_wires@Rewrite@zx@tket@@SA?AV123@XZ
?rebase_to_zx@Rewrite@zx@tket@@SA?AV123@XZ
?rebase_to_mbqc@Rewrite@zx@tket@@SA?AV123@XZ
?red_to_green@Rewrite@zx@tket@@SA?AV123@XZ
?spider_fusion@Rewrite@zx@tket@@SA?AV123@XZ
?self_loop_removal@Rewrite@zx@tket@@SA?AV123@XZ
?parallel_h_removal@Rewrite@zx@tket@@SA?AV123@XZ
?separate_boundaries@Rewrite@zx@tket@@SA?AV123@XZ
?io_extension@Rewrite@zx@tket@@SA?AV123@XZ
?remove_interior_cliffords@Rewrite@zx@tket@@SA?AV123@XZ
?remove_interior_paulis@Rewrite@zx@tket@@SA?AV123@XZ
?gadgetise_interior_paulis@Rewrite@zx@tket@@SA?AV123@XZ
?merge_gadgets@Rewrite@zx@tket@@SA?AV123@XZ
?extend_for_PX_outputs@Rewrite@zx@tket@@SA?AV123@XZ
?internalise_gadgets@Rewrite@zx@tket@@SA?AV123@XZ
?to_graphlike_form@Rewrite@zx@tket@@SA?AV123@XZ
?reduce_graphlike_form@Rewrite@zx@tket@@SA?AV123@XZ
?to_MBQC_diag@Rewrite@zx@tket@@SA?AV123@XZ
??0Circuit@tket@@QEAA@AEBV01@@Z
?get_id_from_in@Circuit@tket@@QEBA?AVUnitID@2@AEBQEAX@Z
?get_id_from_out@Circuit@tket@@QEBA?AVUnitID@2@AEBQEAX@Z
?get_OpType_from_Vertex@Circuit@tket@@QEBA?AW4OpType@2@AEBQEAX@Z
?circuit_to_zx@tket@@YA?AU?$pair@VZXDiagram@zx@tket@@V?$bimap@PEAXPEAXUna@mpl@boost@@U123@U123@@bimaps@boost@@@std@@AEBVCircuit@1@@Z
??0DirectedGen@zx@tket@@QEAA@W4ZXType@12@W4QuantumType@12@@Z
??0ZXDiagram@zx@tket@@QEAA@$$QEAV012@@Z
??0ZXDiagram@zx@tket@@QEAA@AEBV012@@Z
??0ZXDiagram@zx@tket@@QEAA@IIII@Z
??0ZXDiagram@zx@tket@@QEAA@XZ
??4ZXDiagram@zx@tket@@QEAAAEAV012@$$QEAV012@@Z
?get_boundary@ZXDiagram@zx@tket@@QEBA?AV?$vector@PEAXV?$allocator@PEAX@std@@@std@@V?$optional@W4ZXType@zx@tket@@@5@V?$optional@W4QuantumType@zx@tket@@@5@@Z
?get_scalar@ZXDiagram@zx@tket@@QEBAAEBVExpression@SymEngine@@XZ
?multiply_scalar@ZXDiagram@zx@tket@@QEAAXAEBVExpression@SymEngine@@@Z
?n_vertices@ZXDiagram@zx@tket@@QEBAIXZ
?n_wires@ZXDiagram@zx@tket@@QEBAIXZ
?count_vertices@ZXDiagram@zx@tket@@QEBAIW4ZXType@23@@Z
?count_wires@ZXDiagram@zx@tket@@QEBAIW4ZXWireType@23@@Z
?degree@ZXDiagram@zx@tket@@QEBAIAEBQEAX@Z
?neighbours@ZXDiagram@zx@tket@@QEBA?AV?$vector@PEAXV?$allocator@PEAX@std@@@std@@AEBQEAX@Z
?adj_wires@ZXDiagram@zx@tket@@QEBA?AV?$vector@V?$edge_desc_impl@Ubidirectional_tag@boost@@PEAX@detail@boost@@V?$allocator@V?$edge_desc_impl@Ubidirectional_tag@boost@@PEAX@detail@boost@@@std@@@std@@AEBQEAX@Z
?wires_between@ZXDiagram@zx@tket@@QEBA?AV?$vector@V?$edge_desc_impl@Ubidirectional_tag@boost@@PEAX@detail@boost@@V?$allocator@V?$edge_desc_impl@Ubidirectional_tag@boost@@PEAX@detail@boost@@@std@@@std@@AEBQEAX0@Z
?wire_between@ZXDiagram@zx@tket@@QEBA?AV?$optional@V?$edge_desc_impl@Ubidirectional_tag@boost@@PEAX@detail@boost@@@std@@AEBQEAX0W4WireSearchOption@123@@Z
?wire_at_port@ZXDiagram@zx@tket@@QEBA?AV?$edge_desc_impl@Ubidirectional_tag@boost@@PEAX@detail@boost@@AEBQEAXV?$optional@I@std@@@Z
?extend_at_boundary_paulis@Rewrite@zx@tket@@SA?AV123@XZ
?get_name@ZXDiagram@zx@tket@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBQEAX@Z
?get_zxtype@ZXDiagram@zx@tket@@QEBA?AW4ZXType@23@AEBQEAX@Z
?get_qtype@ZXDiagram@zx@tket@@QEBA?AW4QuantumType@23@AEBV?$edge_desc_impl@Ubidirectional_tag@boost@@PEAX@detail@boost@@@Z
?get_qtype@ZXDiagram@zx@tket@@QEBA?AV?$optional@W4QuantumType@zx@tket@@@std@@AEBQEAX@Z
?set_vertex_ZXGen_ptr@ZXDiagram@zx@tket@@QEAAXAEBQEAXAEBV?$shared_ptr@$$CBVZXGen@zx@tket@@@std@@@Z
?get_wire_type@ZXDiagram@zx@tket@@QEBA?AW4ZXWireType@23@AEBV?$edge_desc_impl@Ubidirectional_tag@boost@@PEAX@detail@boost@@@Z
?source@ZXDiagram@zx@tket@@QEBAPEAXAEBV?$edge_desc_impl@Ubidirectional_tag@boost@@PEAX@detail@boost@@@Z
?target@ZXDiagram@zx@tket@@QEBAPEAXAEBV?$edge_desc_impl@Ubidirectional_tag@boost@@PEAX@detail@boost@@@Z
?source_port@ZXDiagram@zx@tket@@QEBA?AV?$optional@I@std@@AEBV?$edge_desc_impl@Ubidirectional_tag@boost@@PEAX@detail@boost@@@Z
?target_port@ZXDiagram@zx@tket@@QEBA?AV?$optional@I@std@@AEBV?$edge_desc_impl@Ubidirectional_tag@boost@@PEAX@detail@boost@@@Z
?other_end@ZXDiagram@zx@tket@@QEBAPEAXAEBV?$edge_desc_impl@Ubidirectional_tag@boost@@PEAX@detail@boost@@AEBQEAX@Z
?set_wire_qtype@ZXDiagram@zx@tket@@QEAAXAEBV?$edge_desc_impl@Ubidirectional_tag@boost@@PEAX@detail@boost@@W4QuantumType@23@@Z
?set_wire_type@ZXDiagram@zx@tket@@QEAAXAEBV?$edge_desc_impl@Ubidirectional_tag@boost@@PEAX@detail@boost@@W4ZXWireType@23@@Z
?check_validity@ZXDiagram@zx@tket@@QEBAXXZ
?symbol_substitution@ZXDiagram@zx@tket@@QEAAXAEBV?$map@V?$RCP@$$CBVSymbol@SymEngine@@@SymEngine@@NURCPBasicKeyLess@2@V?$allocator@U?$pair@$$CBV?$RCP@$$CBVSymbol@SymEngine@@@SymEngine@@N@std@@@std@@@std@@@Z
?symbol_substitution@ZXDiagram@zx@tket@@QEAAXAEBV?$map@V?$RCP@$$CBVSymbol@SymEngine@@@SymEngine@@VExpression@2@URCPBasicKeyLess@2@V?$allocator@U?$pair@$$CBV?$RCP@$$CBVSymbol@SymEngine@@@SymEngine@@VExpression@2@@std@@@std@@@std@@@Z
?free_symbols@ZXDiagram@zx@tket@@QEBA?AV?$set@V?$RCP@$$CBVSymbol@SymEngine@@@SymEngine@@USymCompareLess@tket@@V?$allocator@V?$RCP@$$CBVSymbol@SymEngine@@@SymEngine@@@std@@@std@@XZ
?is_symbolic@ZXDiagram@zx@tket@@QEBA_NXZ
?to_graphviz_str@ZXDiagram@zx@tket@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV?$set@PEAXU?$less@PEAX@std@@V?$allocator@PEAX@2@@5@@Z
?add_vertex@ZXDiagram@zx@tket@@QEAAPEAXW4ZXType@23@AEBVExpression@SymEngine@@W4QuantumType@23@@Z
?add_vertex@ZXDiagram@zx@tket@@QEAAPEAXW4ZXType@23@W4QuantumType@23@@Z
?add_vertex@ZXDiagram@zx@tket@@QEAAPEAXV?$shared_ptr@$$CBVZXGen@zx@tket@@@std@@@Z
?add_clifford_vertex@ZXDiagram@zx@tket@@QEAAPEAXW4ZXType@23@_NW4QuantumType@23@@Z
?add_wire@ZXDiagram@zx@tket@@QEAA?AV?$edge_desc_impl@Ubidirectional_tag@boost@@PEAX@detail@boost@@AEBQEAX0W4ZXWireType@23@W4QuantumType@23@V?$optional@I@std@@3@Z
?remove_vertex@ZXDiagram@zx@tket@@QEAAXAEBQEAX@Z
?remove_wire@ZXDiagram@zx@tket@@QEAAXAEBV?$edge_desc_impl@Ubidirectional_tag@boost@@PEAX@detail@boost@@@Z
?to_doubled_diagram@ZXDiagram@zx@tket@@QEBA?AV123@XZ
?c@Flow@zx@tket@@QEBA?AV?$multi_index_container@PEAXU?$indexed_by@U?$ordered_unique@U?$tag@UTagKey@tket@@Una@mpl@boost@@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@@multi_index@boost@@U?$identity@PEAX@23@Una@mpl@3@@multi_index@boost@@U?$sequenced@U?$tag@UTagSeq@tket@@Una@mpl@boost@@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@@multi_index@boost@@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@PEAX@std@@@multi_index@boost@@AEBQEAX@Z
?odd@Flow@zx@tket@@QEBA?AV?$multi_index_container@PEAXU?$indexed_by@U?$ordered_unique@U?$tag@UTagKey@tket@@Una@mpl@boost@@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@@multi_index@boost@@U?$identity@PEAX@23@Una@mpl@3@@multi_index@boost@@U?$sequenced@U?$tag@UTagSeq@tket@@Una@mpl@boost@@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@@multi_index@boost@@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@PEAX@std@@@multi_index@boost@@AEBQEAXAEBVZXDiagram@23@@Z
?d@Flow@zx@tket@@QEBAIAEBQEAX@Z
?focus@Flow@zx@tket@@QEAAXAEBVZXDiagram@23@@Z
?identify_causal_flow@Flow@zx@tket@@SA?AV123@AEBVZXDiagram@23@@Z
?identify_pauli_flow@Flow@zx@tket@@SA?AV123@AEBVZXDiagram@23@@Z
?identify_focussed_sets@Flow@zx@tket@@SA?AV?$set@V?$multi_index_container@PEAXU?$indexed_by@U?$ordered_unique@U?$tag@UTagKey@tket@@Una@mpl@boost@@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@@multi_index@boost@@U?$identity@PEAX@23@Una@mpl@3@@multi_index@boost@@U?$sequenced@U?$tag@UTagSeq@tket@@Una@mpl@boost@@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@@multi_index@boost@@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@PEAX@std@@@multi_index@boost@@U?$less@V?$multi_index_container@PEAXU?$indexed_by@U?$ordered_unique@U?$tag@UTagKey@tket@@Una@mpl@boost@@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@@multi_index@boost@@U?$identity@PEAX@23@Una@mpl@3@@multi_index@boost@@U?$sequenced@U?$tag@UTagSeq@tket@@Una@mpl@boost@@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@@multi_index@boost@@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@PEAX@std@@@multi_index@boost@@@std@@V?$allocator@V?$multi_index_container@PEAXU?$indexed_by@U?$ordered_unique@U?$tag@UTagKey@tket@@Una@mpl@boost@@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@@multi_index@boost@@U?$identity@PEAX@23@Una@mpl@3@@multi_index@boost@@U?$sequenced@U?$tag@UTagSeq@tket@@Una@mpl@boost@@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@U345@@multi_index@boost@@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@PEAX@std@@@multi_index@boost@@@5@@std@@AEBVZXDiagram@23@@Z
??0PhasedGen@zx@tket@@QEAA@W4ZXType@12@AEBVExpression@SymEngine@@W4QuantumType@12@@Z
?get_param@PhasedGen@zx@tket@@QEBA?AVExpression@SymEngine@@XZ
??0CliffordGen@zx@tket@@QEAA@W4ZXType@12@_NW4QuantumType@12@@Z
?get_param@CliffordGen@zx@tket@@QEBA_NXZ
?get_type@ZXGen@zx@tket@@QEBA?AW4ZXType@23@XZ
??8ZXGen@zx@tket@@QEBA_NAEBV012@@Z
?create_gen@ZXGen@zx@tket@@SA?AV?$shared_ptr@$$CBVZXGen@zx@tket@@@std@@W4ZXType@23@AEBVExpression@SymEngine@@W4QuantumType@23@@Z
?create_gen@ZXGen@zx@tket@@SA?AV?$shared_ptr@$$CBVZXGen@zx@tket@@@std@@W4ZXType@23@W4QuantumType@23@@Z
??0ZXBox@zx@tket@@QEAA@AEBVZXDiagram@12@@Z
?get_diagram@ZXBox@zx@tket@@QEBA?AV?$shared_ptr@$$CBVZXDiagram@zx@tket@@@std@@XZ
?eval_expr@tket@@YA?AV?$optional@N@std@@AEBVExpression@SymEngine@@@Z

tklog

?warn@Logger@tket@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEAV?$basic_ostream@DU?$char_traits@D@std@@@4@@Z
?tket_log@tket@@YAAEAV?$shared_ptr@VLogger@tket@@@std@@XZ

msvcp140

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?uncaught_exception@std@@YA_NXZ
_Exp
_Sinh
_Cosh
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??Bid@locale@std@@QEAA_KXZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?tolower@?$ctype@D@std@@QEBADD@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?good@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
_Strcoll
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrCompare@@YA_NPEBX0@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?id@?$collate@D@std@@2V0locale@2@A
?_Xlength_error@std@@YAXPEBD@Z
?id@?$ctype@D@std@@2V0locale@2@A
?_Xbad_function_call@std@@YAXXZ
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?precision@ios_base@std@@QEAA_J_J@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?uncaught_exceptions@std@@YAHXZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
_Strxfrm
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_type_info_destroy_list
__current_exception
__current_exception_context
__std_exception_destroy
__std_exception_copy
__std_type_info_compare
_purecall
__std_type_info_hash
__std_type_info_name
__std_terminate
strchr
__RTtypeid
_CxxThrowException
memcmp
memcpy
memset
memmove
memchr
__RTDynamicCast
__C_specific_handler
__RTCastToVoid

api-ms-win-crt-heap-l1-1-0

_aligned_malloc
malloc
_aligned_free
free
realloc
_callnewh

api-ms-win-crt-string-l1-1-0

isspace
strncmp
_strdup
strcmp

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_errno
terminate
abort
raise

api-ms-win-crt-math-l1-1-0

trunc
ceil
floor
tgamma
scalbn
lgamma
ldexp
ilogb
tanh
erfc
erf
copysign
atanh
asinh
acosh
_dsign
ceilf
tan
sqrt
sinh
sin
acos
pow
log
exp
cosh
cos
atan2
atan
asin
hypot

api-ms-win-crt-convert-l1-1-0

strtod
strtol

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf

kernel32

AcquireSRWLockExclusive
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
ReleaseSRWLockExclusive
InitializeSListHead
WakeAllConditionVariable
SleepConditionVariableSRW

Exports

Exports

?$TSS0@?1??create@?$StaticObject@UPolymorphicCasters@detail@cereal@@@detail@cereal@@CAAEAUPolymorphicCasters@34@XZ@4HA
??4?$StaticObject@UPolymorphicCasters@detail@cereal@@@detail@cereal@@QEAAAEAV012@AEBV012@@Z
?create@?$StaticObject@UPolymorphicCasters@detail@cereal@@@detail@cereal@@CAAEAUPolymorphicCasters@23@XZ
?getInstance@?$StaticObject@UPolymorphicCasters@detail@cereal@@@detail@cereal@@SAAEAUPolymorphicCasters@23@XZ
?instance@?$StaticObject@UPolymorphicCasters@detail@cereal@@@detail@cereal@@0AEAUPolymorphicCasters@23@EA
?t@?1??create@?$StaticObject@UPolymorphicCasters@detail@cereal@@@detail@cereal@@CAAEAUPolymorphicCasters@34@XZ@4U534@A
PyInit_zx

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 259KB - Virtual size: 259KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a3de6868c53406060078cb4e92475265

Headers

DLL Characteristics

File Characteristics

Imports

python312

tket

tklog

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 259KB - Virtual size: 259KB

.data Size: 18KB - Virtual size: 21KB

.pdata Size: 38KB - Virtual size: 38KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 259KB - Virtual size: 259KB

.data
Size: 18KB - Virtual size: 21KB

.pdata
Size: 38KB - Virtual size: 38KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 6KB - Virtual size: 6KB