21ca6f36a89a84528f117c17d6b3a59d2809fea59595db093919a34604e09182N

Sharing

Copy URL Twitter E-mail

General

Target

21ca6f36a89a84528f117c17d6b3a59d2809fea59595db093919a34604e09182N
Size

14KB
MD5

55db29ff152acd21d2962a37cc29e2d0
SHA1

b87d871df7a7e69bf95e02767be51e71806850f0
SHA256

21ca6f36a89a84528f117c17d6b3a59d2809fea59595db093919a34604e09182
SHA512

4b4e606c73971048469b0d739905195a4f0d38696962a31f4c597e6625ba97ac6536351114f8143c101852c5525924376ec676dbc43cb69c90fc9e8068c09488
SSDEEP

384:VkUnuHMJkxT6MwVCkehUlkOHziamMuiKnie5Uz2PtT:Vz6nxJkeUlk+27sKnDiz2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21ca6f36a89a84528f117c17d6b3a59d2809fea59595db093919a34604e09182N

Files

21ca6f36a89a84528f117c17d6b3a59d2809fea59595db093919a34604e09182N
.dll windows:6 windows x86 arch:x86

6338bd38b9b55f4382567fd9f6d837c4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

sdl2

SDL_RWFromFile
SDL_FreeSurface
SDL_free
SDL_RWwrite
SDL_RWclose
SDL_GetError
SDL_ConvertSurfaceFormat
SDL_SetError
SDL_malloc

sdl2_image

IMG_SaveJPG_RW
IMG_Linked_Version
IMG_SaveJPG
IMG_LoadTyped_RW

libpng16-16

png_error
png_create_info_struct
png_set_write_fn
png_set_IHDR
png_write_png
png_set_rows
png_create_write_struct
png_get_io_ptr
png_set_longjmp_fn
png_set_tRNS
png_destroy_write_struct
png_set_PLTE

python311

_Py_BuildValue_SizeT
PyImport_ImportModule
PyErr_Occurred
PyEval_SaveThread
_Py_NoneStruct
PyErr_SetString
_PyArg_ParseTupleAndKeywords_SizeT
PyErr_Format
_Py_Dealloc
PyEval_RestoreThread
PyCapsule_GetPointer
PyExc_TypeError
PyObject_GetAttrString
PyModule_Create2
_PyArg_ParseTuple_SizeT
PyCapsule_Type

kernel32

FlushFileBuffers
IsDebuggerPresent
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead

vcruntime140

_except_handler4_common
memset
strrchr
longjmp
__std_type_info_destroy_list
_setjmp3

api-ms-win-crt-string-l1-1-0

_stricmp

api-ms-win-crt-heap-l1-1-0

free

api-ms-win-crt-runtime-l1-1-0

_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm

Exports

Exports

PyInit_imageext

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 620B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6338bd38b9b55f4382567fd9f6d837c4

Headers

DLL Characteristics

File Characteristics

Imports

sdl2

sdl2_image

libpng16-16

python311

kernel32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 1KB

.gfids Size: 512B - Virtual size: 20B

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 1024B - Virtual size: 620B

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 1KB

.gfids
Size: 512B - Virtual size: 20B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 1024B - Virtual size: 620B