PyInit_transform
Static task
static1
Behavioral task
behavioral1
Sample
8b990fcc1b3ae9707a7403bbd6dcfe084c504e7031b3a8b6e518840b42f90db1N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8b990fcc1b3ae9707a7403bbd6dcfe084c504e7031b3a8b6e518840b42f90db1N.dll
Resource
win10v2004-20241007-en
General
-
Target
8b990fcc1b3ae9707a7403bbd6dcfe084c504e7031b3a8b6e518840b42f90db1N
-
Size
233KB
-
MD5
d89efebd29735681307f220172101960
-
SHA1
d9af73f53cb921c056f7e946c002668d34c04a4a
-
SHA256
8b990fcc1b3ae9707a7403bbd6dcfe084c504e7031b3a8b6e518840b42f90db1
-
SHA512
7bc8bd190faac9866896c7582954c7b087e76811e2fcdd6c83ac5dedf65e4f2565e7ddda8574fe4df78e6a6a043145d98c54e04112018fad133ff7e0d784abaf
-
SSDEEP
6144:wa6Ah7iISpPiWF4uUNEw0AHYqJGEax8DjYvA:4IQF4uUKwXWvA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b990fcc1b3ae9707a7403bbd6dcfe084c504e7031b3a8b6e518840b42f90db1N
Files
-
8b990fcc1b3ae9707a7403bbd6dcfe084c504e7031b3a8b6e518840b42f90db1N.dll windows:6 windows x64 arch:x64
9a419ec5ff932551e61c7c271c2f05c8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
python310
PyObject_RichCompareBool
PyTuple_Size
PyExc_FutureWarning
PyThread_tss_get
PyException_SetTraceback
PyCapsule_New
PySet_Type
PyCapsule_GetName
PyBytes_Size
PyDict_New
PyList_GetItem
PySequence_Check
PyException_SetContext
PyInstanceMethod_New
PyObject_IsInstance
PyMem_Free
PyTuple_SetItem
PyCMethod_New
PyThread_tss_set
PyObject_GetItem
PyObject_CallObject
PyObject_HasAttrString
PyIndex_Check
PyProperty_Type
_Py_NotImplementedStruct
PyByteArray_Size
PyGILState_Ensure
PyCapsule_SetContext
PyNumber_Check
PyNumber_Long
_Py_Dealloc
PyExc_TypeError
PyThreadState_Clear
PyCapsule_Type
PyStaticMethod_Type
PyDict_Copy
PyObject_Str
PyUnicode_AsUTF8String
PyModule_Type
PyCallable_Check
PyFrame_GetBack
PyFrame_GetCode
PyExc_IndexError
PyExc_ImportError
PyCapsule_SetPointer
_Py_TrueStruct
PyExc_SystemError
PyObject_SetItem
PyException_SetCause
PyInterpreterState_Get
PyDict_DelItemString
PyUnicode_FromString
PyEval_AcquireThread
_PyType_Lookup
PyGILState_GetThisThreadState
PyBuffer_Release
PyObject_Repr
PyByteArray_Type
PyNumber_Float
PyType_Type
PySequence_Tuple
_PyObject_GetDictPtr
PyObject_GetAttrString
PyType_Ready
PyErr_Restore
PyType_IsSubtype
PyMethod_Type
PyFloat_Type
_Py_FalseStruct
PyThreadState_New
PyDict_Type
PyErr_Format
PyDict_Next
PyExc_ValueError
PyObject_GetIter
PyErr_WriteUnraisable
PyIter_Next
PyStaticMethod_New
PyErr_SetString
PySet_Size
PyByteArray_AsString
PyList_Size
PySet_Add
PyFloat_FromDouble
PyDict_Size
PyObject_GenericSetDict
PyTuple_New
_Py_NoneStruct
PyErr_Clear
PyBytes_AsStringAndSize
PyGILState_Release
PyModule_Create2
PyList_New
PySet_New
PyUnicode_FromFormat
PyObject_ClearWeakRefs
PyObject_GenericGetDict
PyLong_AsLong
PyObject_CallFunctionObjArgs
PyErr_Fetch
PyModule_AddObject
PyBytes_FromString
PyFloat_AsDouble
PyFrame_GetLineNumber
PyDict_Contains
PyObject_GetAttr
PyCapsule_GetContext
Py_GetVersion
PyDict_GetItemWithError
PyExc_MemoryError
PyInstanceMethod_Type
PyObject_GC_UnTrack
PyLong_FromLong
PyObject_SetAttrString
PyExc_RuntimeError
_PyThreadState_UncheckedGet
PyEval_SaveThread
PyUnicode_AsUTF8AndSize
PyUnicode_DecodeUTF8
PyLong_FromSsize_t
PyErr_Occurred
PySequence_GetItem
PyErr_NormalizeException
PyBytes_AsString
PyErr_WarnEx
PyObject_Malloc
PyLong_AsUnsignedLong
PyThreadState_Get
PyWeakref_NewRef
PyCFunction_Type
PyObject_SetAttr
PyExc_BufferError
PyMem_Calloc
PyBaseObject_Type
PyFrozenSet_Type
PyInterpreterState_GetDict
PyCapsule_GetPointer
PyExc_OverflowError
PyUnicode_AsEncodedString
PyTuple_GetItem
PySequence_Size
PyThreadState_DeleteCurrent
PyThread_tss_create
tket
?decomp_CCX@Transforms@tket@@YA?AVTransform@2@XZ
?decompose_NPhasedX@Transforms@tket@@YA?AVTransform@2@XZ
?synthesise_tk@Transforms@tket@@YA?AVTransform@2@XZ
?synthesise_tket@Transforms@tket@@YA?AVTransform@2@XZ
?three_qubit_squash@Transforms@tket@@YA?AVTransform@2@W4OpType@2@@Z
?rebase_tket@Transforms@tket@@YA?AVTransform@2@XZ
?special_UCC_synthesis@Transforms@tket@@YA?AVTransform@2@W4PauliSynthStrat@12@W4CXConfigType@2@@Z
?ZZPhase_to_Rz@Transforms@tket@@YA?AVTransform@2@XZ
?rebase_projectq@Transforms@tket@@YA?AVTransform@2@XZ
?rebase_quil@Transforms@tket@@YA?AVTransform@2@XZ
?rebase_ionq@Transforms@tket@@YA?AVTransform@2@XZ
?decomp_boxes@Transforms@tket@@YA?AVTransform@2@AEBV?$unordered_set@W4OpType@tket@@U?$hash@W4OpType@tket@@@std@@U?$equal_to@W4OpType@tket@@@4@V?$allocator@W4OpType@tket@@@4@@std@@AEBV?$unordered_set@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$hash@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@U?$equal_to@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@5@@Z
?commute_through_multis@Transforms@tket@@YA?AVTransform@2@XZ
?repeat_while@Transforms@tket@@YA?AVTransform@2@AEBV32@0@Z
?two_qubit_squash@Transforms@tket@@YA?AVTransform@2@W4OpType@2@N_N@Z
?decompose_TK2@Transforms@tket@@YA?AVTransform@2@AEBUTwoQbFidelities@12@_N@Z
?decompose_SWAP_to_CX@Transforms@tket@@YA?AVTransform@2@AEBVArchitecture@2@@Z
?globalise_PhasedX@Transforms@tket@@YA?AVTransform@2@_N@Z
?push_cliffords_through_measures@Transforms@tket@@YA?AVTransform@2@XZ
?decompose_CX_directed@Transforms@tket@@YA?AVTransform@2@AEBVArchitecture@2@@Z
?round_angles@Transforms@tket@@YA?AVTransform@2@I_N@Z
?separate_classical@Transforms@tket@@YA?AU?$pair@VCircuit@tket@@V12@@std@@AEBVCircuit@2@@Z
?decompose_ZX@Transforms@tket@@YA?AVTransform@2@XZ
?squash_1qb_to_tk1@Transforms@tket@@YA?AVTransform@2@XZ
?rebase_cirq@Transforms@tket@@YA?AVTransform@2@XZ
?remove_redundancies@Transforms@tket@@YA?AVTransform@2@XZ
?commute_SQ_gates_through_SWAPS@Transforms@tket@@YA?AVTransform@2@AEBV?$map@VNode@tket@@V?$map@W4OpType@tket@@NU?$less@W4OpType@tket@@@std@@V?$allocator@U?$pair@$$CBW4OpType@tket@@N@std@@@4@@std@@U?$less@VNode@tket@@@4@V?$allocator@U?$pair@$$CBVNode@tket@@V?$map@W4OpType@tket@@NU?$less@W4OpType@tket@@@std@@V?$allocator@U?$pair@$$CBW4OpType@tket@@N@std@@@4@@std@@@std@@@4@@std@@@Z
?commute_SQ_gates_through_SWAPS@Transforms@tket@@YA?AVTransform@2@AEBV?$map@VNode@tket@@NU?$less@VNode@tket@@@std@@V?$allocator@U?$pair@$$CBVNode@tket@@N@std@@@4@@std@@@Z
?repeat@Transforms@tket@@YA?AVTransform@2@AEBV32@@Z
?optimise_via_PhaseGadget@Transforms@tket@@YA?AVTransform@2@W4CXConfigType@2@@Z
?rebase_pyzx@Transforms@tket@@YA?AVTransform@2@XZ
?cnx_pairwise_decomposition@Transforms@tket@@YA?AVTransform@2@XZ
?decompose_BRIDGE_to_CX@Transforms@tket@@YA?AVTransform@2@XZ
?synthesise_pauli_graph@Transforms@tket@@YA?AVTransform@2@W4PauliSynthStrat@12@W4CXConfigType@2@@Z
?pairwise_pauli_gadgets@Transforms@tket@@YA?AVTransform@2@W4CXConfigType@2@@Z
?decompose_SWAP@Transforms@tket@@YA?AVTransform@2@AEBVCircuit@2@@Z
?decompose_cliffords_std@Transforms@tket@@YA?AVTransform@2@XZ
?clifford_simp@Transforms@tket@@YA?AVTransform@2@_N@Z
?greedy_pauli_optimisation@Transforms@tket@@YA?AVTransform@2@NN@Z
?decomp_controlled_Rys@Transforms@tket@@YA?AVTransform@2@XZ
?sequence@Transforms@tket@@YA?AVTransform@2@AEAV?$vector@VTransform@tket@@V?$allocator@VTransform@tket@@@std@@@std@@@Z
??0Circuit@tket@@QEAA@AEBV01@@Z
??5tket@@YA?AVTransform@0@AEBV10@0@Z
?normalise_TK2@Transforms@tket@@YA?AVTransform@2@XZ
msvcp140
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrCompare@@YA_NPEBX0@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memmove
memchr
memcmp
__std_type_info_destroy_list
__RTDynamicCast
__std_exception_destroy
__std_exception_copy
__std_type_info_compare
_purecall
__std_type_info_hash
__std_type_info_name
__std_terminate
strchr
memcpy
__current_exception
__current_exception_context
__C_specific_handler
_CxxThrowException
memset
api-ms-win-crt-heap-l1-1-0
_callnewh
free
malloc
_aligned_free
_aligned_malloc
api-ms-win-crt-string-l1-1-0
_strdup
strncmp
strcmp
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo_noreturn
_initterm_e
terminate
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
kernel32
InitializeSListHead
AcquireSRWLockExclusive
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
ReleaseSRWLockExclusive
SleepConditionVariableSRW
WakeAllConditionVariable
api-ms-win-crt-math-l1-1-0
ceilf
Exports
Exports
Sections
.text Size: 161KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 432B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ