661db5d05fe0211a2d5681c9005d1384bd89e339b91ec17d417a8251c29fcac8N

Sharing

Copy URL Twitter E-mail

General

Target

661db5d05fe0211a2d5681c9005d1384bd89e339b91ec17d417a8251c29fcac8N
Size

138KB
MD5

b55d2d95e587eb90dce3d3f182ad8070
SHA1

8125f7aa18cd251ef9be6d91e91ecb6035ac23de
SHA256

661db5d05fe0211a2d5681c9005d1384bd89e339b91ec17d417a8251c29fcac8
SHA512

e3f79c7aaa7dad0e30823390153083d2a001e55686e79850cd35bfc267165473693717812683088d92e59f930c5c8bc440874615d17a3b792f7f2e67dd426dc6
SSDEEP

3072:CVt/t1kyGnS6RCdKpjzDEJWs/eGVc/bh+zZ3x8Du+X:CVxfonS6RCOzDCWqeGQcVx8Du

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
661db5d05fe0211a2d5681c9005d1384bd89e339b91ec17d417a8251c29fcac8N

Files

661db5d05fe0211a2d5681c9005d1384bd89e339b91ec17d417a8251c29fcac8N
.dll windows:6 windows x64 arch:x64

f4fb0fbddc95067bbdf2e48efed09591

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

python312

PyExc_FutureWarning
PyThread_tss_get
PyException_SetTraceback
PyCapsule_New
PyCapsule_GetName
PyBytes_Size
PyDict_New
PyList_GetItem
PyException_SetContext
PyInstanceMethod_New
PyObject_IsInstance
PyMem_Free
PyTuple_SetItem
PyCMethod_New
PyThread_tss_set
PyObject_GetItem
PyObject_CallObject
PyObject_HasAttrString
PyProperty_Type
PyIndex_Check
_Py_NotImplementedStruct
PyByteArray_Size
PyGILState_Ensure
PyCapsule_SetContext
PyNumber_Check
PyNumber_Long
PyThreadState_DeleteCurrent
PyExc_TypeError
PyTuple_GetItem
PyCapsule_Type
PyDict_Copy
PyObject_Str
PyUnicode_AsUTF8String
PyModule_Type
PyCallable_Check
PyFrame_GetBack
PyFrame_GetCode
PyExc_IndexError
PyExc_ImportError
PyCapsule_SetPointer
_Py_TrueStruct
PyExc_SystemError
PyObject_SetItem
PyException_SetCause
PyInterpreterState_Get
PyDict_DelItemString
PyTuple_Size
PyUnicode_FromString
PyEval_AcquireThread
_PyType_Lookup
PyGILState_GetThisThreadState
PyBuffer_Release
PyObject_Repr
PyByteArray_Type
PyType_Type
PySequence_Tuple
_PyObject_GetDictPtr
PyObject_RichCompareBool
_Py_Dealloc
PyExc_OverflowError
PyErr_Restore
PyType_IsSubtype
PyMethod_Type
PyFloat_Type
_Py_FalseStruct
PyThreadState_New
PyDict_Type
PyErr_Format
PyDict_Next
PyExc_ValueError
PyErr_WriteUnraisable
PyErr_SetString
PyByteArray_AsString
PyList_Size
PyDict_Size
PyObject_GenericSetDict
PyTuple_New
_Py_NoneStruct
PyBytes_AsStringAndSize
PyGILState_Release
PyBytes_FromString
PyFrame_GetLineNumber
PyDict_Contains
PyObject_GetAttr
PyCapsule_GetContext
PyErr_Clear
PyObject_GetAttrString
Py_GetVersion
PyType_Ready
PyDict_GetItemWithError
PyExc_MemoryError
PyModule_Create2
PyList_New
PyUnicode_FromFormat
PyObject_ClearWeakRefs
PyObject_GenericGetDict
PyLong_AsLong
PyObject_CallFunctionObjArgs
PyErr_Fetch
PyModule_AddObject
PyInstanceMethod_Type
PyCapsule_GetPointer
PyObject_GC_UnTrack
PyLong_FromLong
PyObject_SetAttrString
PyExc_RuntimeError
_PyThreadState_UncheckedGet
PyEval_SaveThread
PyUnicode_AsUTF8AndSize
PyUnicode_DecodeUTF8
PyLong_FromSsize_t
PyErr_Occurred
PyErr_NormalizeException
PyBytes_AsString
PyErr_WarnEx
PyObject_Malloc
PyThreadState_Get
PyWeakref_NewRef
PyCFunction_Type
PyObject_SetAttr
PyExc_BufferError
PyMem_Calloc
PyBaseObject_Type
PyInterpreterState_GetDict
PyUnicode_AsEncodedString
PyThreadState_Clear
PyThread_tss_create

tklog

?tket_log@tket@@YAAEAV?$shared_ptr@VLogger@tket@@@std@@XZ
?set_level@Logger@tket@@QEAAXW4LogLevel@2@@Z

msvcp140

?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrCompare@@YA_NPEBX0@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_CxxThrowException
__C_specific_handler
__current_exception_context
__current_exception
__std_type_info_destroy_list
strchr
__std_terminate
__std_type_info_name
__std_type_info_hash
_purecall
__std_type_info_compare
__std_exception_copy
__std_exception_destroy
memchr
memset
memcpy
memmove
__RTDynamicCast
memcmp

api-ms-win-crt-string-l1-1-0

_strdup
strcmp
strncmp

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc
_aligned_malloc
_aligned_free

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_cexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
terminate
_seh_filter_dll
_initterm_e
_initterm
_invalid_parameter_noinfo_noreturn

kernel32

IsProcessorFeaturePresent
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
IsDebuggerPresent
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
ReleaseSRWLockExclusive
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead

api-ms-win-crt-math-l1-1-0

ceilf

Exports

Exports

PyInit_logging

Sections

.text
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f4fb0fbddc95067bbdf2e48efed09591

Headers

DLL Characteristics

File Characteristics

Imports

python312

tklog

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 99KB - Virtual size: 98KB

.rdata Size: 30KB - Virtual size: 29KB

.data Size: 2KB - Virtual size: 3KB

.pdata Size: 5KB - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 224B

.text
Size: 99KB - Virtual size: 98KB

.rdata
Size: 30KB - Virtual size: 29KB

.data
Size: 2KB - Virtual size: 3KB

.pdata
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 224B