PyInit_placement
Static task
static1
Behavioral task
behavioral1
Sample
24766b22767c838c6392723be7d6fa115d950768504e5ffb600b9e6451a817beN.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
24766b22767c838c6392723be7d6fa115d950768504e5ffb600b9e6451a817beN.dll
Resource
win10v2004-20241007-en
General
-
Target
24766b22767c838c6392723be7d6fa115d950768504e5ffb600b9e6451a817beN
-
Size
251KB
-
MD5
74b3507bde8ea0c4a8b5dd1296531c50
-
SHA1
88082260641301b388e2afe0bdc7bd67b62be147
-
SHA256
24766b22767c838c6392723be7d6fa115d950768504e5ffb600b9e6451a817be
-
SHA512
f0dc255c26d7c8d7dc71d0ef5f782a6bf240362190d0013eca079ef7d5e8881d1c8b0515d9d15be827b33c4fb03987610b93664c04b88c39e424630c7eb7e2b6
-
SSDEEP
6144:OTI92x92AuJTdtg2i6jdFtBEco1J9NP3qq08qM+kKjx8PXGwZE:ZFJg27ntuJfKqZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24766b22767c838c6392723be7d6fa115d950768504e5ffb600b9e6451a817beN
Files
-
24766b22767c838c6392723be7d6fa115d950768504e5ffb600b9e6451a817beN.dll windows:6 windows x64 arch:x64
e0c44f66325a8ed11ff3e29920af8271
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
python310
PyCapsule_Type
PyThreadState_Clear
PyExc_TypeError
PyThreadState_DeleteCurrent
PyNumber_Long
PyThread_tss_create
PyNumber_Check
PyCapsule_SetContext
PyGILState_Ensure
PyByteArray_Size
_Py_NotImplementedStruct
PyProperty_Type
PyIndex_Check
PyObject_HasAttrString
PyObject_CallObject
PyObject_GetItem
PyThread_tss_set
PyCMethod_New
PyTuple_SetItem
PyMem_Free
PyObject_IsInstance
PyInstanceMethod_New
PyException_SetContext
PySequence_Check
PyList_GetItem
PyDict_New
PyBytes_Size
PyCapsule_GetName
PyCapsule_New
PyException_SetTraceback
PyThread_tss_get
PyExc_FutureWarning
PyTuple_Size
PyObject_RichCompareBool
PyList_Append
PyErr_Clear
PyObject_GetAttrString
PyType_Ready
PyModule_Create2
PyList_New
PyUnicode_FromFormat
PyObject_ClearWeakRefs
PyObject_GenericGetDict
PyObject_CallFunctionObjArgs
PyErr_Fetch
PyModule_AddObject
PyCapsule_GetPointer
PyTuple_GetItem
_Py_Dealloc
PyExc_OverflowError
PyErr_Restore
PyStaticMethod_Type
PyFloat_Type
_Py_FalseStruct
PyThreadState_New
PyBool_Type
PyDict_Type
PyErr_Format
PyDict_Next
PyExc_ValueError
PyObject_GetIter
PyErr_WriteUnraisable
PyIter_Next
PyStaticMethod_New
PyErr_SetString
PyByteArray_AsString
PyList_Size
PyFloat_FromDouble
PyLong_FromLongLong
PyDict_Size
PyObject_GenericSetDict
PyTuple_New
PyLong_AsLongLong
_Py_NoneStruct
PyBytes_AsStringAndSize
PyGILState_Release
PyBytes_FromString
PyLong_AsUnsignedLongLong
PyFloat_AsDouble
PyFrame_GetLineNumber
PyObject_GetAttr
PyCapsule_GetContext
Py_GetVersion
PyLong_FromUnsignedLongLong
PyDict_GetItemWithError
PyExc_MemoryError
PyInstanceMethod_Type
PyObject_GC_UnTrack
PyDict_Copy
PyObject_SetAttrString
PyExc_RuntimeError
_PyThreadState_UncheckedGet
PyEval_SaveThread
PyUnicode_AsUTF8AndSize
PyUnicode_DecodeUTF8
PyLong_FromSsize_t
PyErr_Occurred
PySequence_GetItem
PyErr_NormalizeException
PyBytes_AsString
PyImport_ImportModule
PyExc_DeprecationWarning
PyErr_WarnEx
PyObject_Malloc
PyLong_AsUnsignedLong
PyThreadState_Get
PyWeakref_NewRef
PyObject_Str
PyUnicode_AsUTF8String
PyModule_Type
PyCallable_Check
_PyObject_GetDictPtr
PyUnicode_FromStringAndSize
PySequence_Tuple
PyType_Type
PyNumber_Float
PyByteArray_Type
PyObject_Repr
PyBuffer_Release
PyGILState_GetThisThreadState
_PyType_Lookup
PyEval_AcquireThread
PyUnicode_FromString
PyDict_DelItemString
PyList_SetItem
PyInterpreterState_Get
PyException_SetCause
PyObject_SetItem
PyExc_SystemError
_Py_TrueStruct
PyCapsule_SetPointer
PyExc_ImportError
PyExc_IndexError
PyFrame_GetCode
PyType_IsSubtype
PyCFunction_Type
PyObject_SetAttr
PyExc_BufferError
PyMem_Calloc
PyBaseObject_Type
PyInterpreterState_GetDict
PyUnicode_AsEncodedString
PySequence_Size
PyFrame_GetBack
tket
??0GraphPlacement@tket@@QEAA@AEBVArchitecture@1@IIII@Z
??0NoiseAwarePlacement@tket@@QEAA@AEBVArchitecture@1@V?$optional@V?$map@VNode@tket@@NU?$less@VNode@tket@@@std@@V?$allocator@U?$pair@$$CBVNode@tket@@N@std@@@4@@std@@@std@@V?$optional@V?$map@U?$pair@VNode@tket@@V12@@std@@NU?$less@U?$pair@VNode@tket@@V12@@std@@@2@V?$allocator@U?$pair@$$CBU?$pair@VNode@tket@@V12@@std@@N@std@@@2@@std@@@4@1IIII@Z
??0LinePlacement@tket@@QEAA@AEBVArchitecture@1@II@Z
?get_all_placement_maps@Placement@tket@@UEBA?AV?$vector@V?$map@VQubit@tket@@VNode@2@U?$less@VQubit@tket@@@std@@V?$allocator@U?$pair@$$CBVQubit@tket@@VNode@2@@std@@@5@@std@@V?$allocator@V?$map@VQubit@tket@@VNode@2@U?$less@VQubit@tket@@@std@@V?$allocator@U?$pair@$$CBVQubit@tket@@VNode@2@@std@@@5@@std@@@2@@std@@AEBVCircuit@2@I@Z
?n_qubits@Circuit@tket@@QEBAIXZ
?to_json@tket@@YAXAEAV?$basic_json@Vmap@std@@Vvector@2@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@_N_J_KNVallocator@2@Uadl_serializer@json_abi_v3_11_3@nlohmann@@V?$vector@EV?$allocator@E@std@@@2@X@json_abi_v3_11_3@nlohmann@@AEBV?$shared_ptr@VPlacement@tket@@@std@@@Z
?from_json@tket@@YAXAEBV?$basic_json@Vmap@std@@Vvector@2@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@_N_J_KNVallocator@2@Uadl_serializer@json_abi_v3_11_3@nlohmann@@V?$vector@EV?$allocator@E@std@@@2@X@json_abi_v3_11_3@nlohmann@@AEAV?$shared_ptr@VPlacement@tket@@@std@@@Z
?repr@UnitID@tket@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?all_qubits@Circuit@tket@@QEBA?AV?$vector@VQubit@tket@@V?$allocator@VQubit@tket@@@std@@@std@@XZ
??0Placement@tket@@QEAA@AEBVArchitecture@1@@Z
?place@Placement@tket@@QEBA_NAEAVCircuit@2@V?$shared_ptr@Uunit_bimaps_t@tket@@@std@@@Z
?place_with_map@Placement@tket@@SA_NAEAVCircuit@2@AEAV?$map@VQubit@tket@@VNode@2@U?$less@VQubit@tket@@@std@@V?$allocator@U?$pair@$$CBVQubit@tket@@VNode@2@@std@@@5@@std@@V?$shared_ptr@Uunit_bimaps_t@tket@@@5@@Z
?get_placement_map@Placement@tket@@QEBA?AV?$map@VQubit@tket@@VNode@2@U?$less@VQubit@tket@@@std@@V?$allocator@U?$pair@$$CBVQubit@tket@@VNode@2@@std@@@5@@std@@AEBVCircuit@2@@Z
tklog
?critical@Logger@tket@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEAV?$basic_ostream@DU?$char_traits@D@std@@@4@@Z
?warn@Logger@tket@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEAV?$basic_ostream@DU?$char_traits@D@std@@@4@@Z
?tket_log@tket@@YAAEAV?$shared_ptr@VLogger@tket@@@std@@XZ
msvcp140
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
_Strxfrm
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??Bid@locale@std@@QEAA_KXZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?tolower@?$ctype@D@std@@QEBADD@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?good@ios_base@std@@QEBA_NXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??1_Lockit@std@@QEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
_Strcoll
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrCompare@@YA_NPEBX0@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?id@?$collate@D@std@@2V0locale@2@A
?_Xlength_error@std@@YAXPEBD@Z
?id@?$ctype@D@std@@2V0locale@2@A
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?uncaught_exceptions@std@@YAHXZ
??0_Lockit@std@@QEAA@H@Z
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_type_info_name
__std_exception_destroy
__std_exception_copy
__std_type_info_compare
_purecall
__std_terminate
strchr
__RTtypeid
_CxxThrowException
memcpy
memmove
memchr
__std_type_info_destroy_list
__current_exception
__current_exception_context
__C_specific_handler
memset
__std_type_info_hash
__RTCastToVoid
__RTDynamicCast
memcmp
api-ms-win-crt-runtime-l1-1-0
_configure_narrow_argv
_seh_filter_dll
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_invalid_parameter_noinfo_noreturn
_crt_atexit
_initterm_e
terminate
abort
_cexit
_initterm
api-ms-win-crt-heap-l1-1-0
_aligned_free
malloc
_aligned_malloc
realloc
free
_callnewh
api-ms-win-crt-string-l1-1-0
strncmp
_strdup
strcmp
kernel32
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
api-ms-win-crt-math-l1-1-0
ceilf
Exports
Exports
Sections
.text Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 712B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ