463031d98d477f0bc8bb87c9b778d09e84381d51fddbccd417bc777468f6a348N

Sharing

Copy URL Twitter E-mail

General

Target

463031d98d477f0bc8bb87c9b778d09e84381d51fddbccd417bc777468f6a348N
Size

2.9MB
MD5

73d4daf60d89d70977f099971b52f740
SHA1

824604e6c72d0d58d6ead8851adbc4b135a828e3
SHA256

463031d98d477f0bc8bb87c9b778d09e84381d51fddbccd417bc777468f6a348
SHA512

751e66c44163f67317c5ff5440f886dd2727aa12ae90b7a6aef4cfede9bbfb5b62bf0e87ab81562fa26b014d2b70a26c2e743eeb45c1a318f8c41dc3d8d5a972
SSDEEP

49152:nhEIi8yWkD44+NDeGF6C2p74v7GBTS3r4IDU8qvzg47QxdTgjmsH/J9KXTABA3fo:a49+DV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
463031d98d477f0bc8bb87c9b778d09e84381d51fddbccd417bc777468f6a348N

Files

463031d98d477f0bc8bb87c9b778d09e84381d51fddbccd417bc777468f6a348N
.dll windows:6 windows x64 arch:x64

75dd7619b9e0306634dfe666e1d0c5a8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

python311

_PyObject_GetDictPtr
PySequence_Tuple
PyType_Type
PyNumber_Float
PyObject_Repr
PyBuffer_Release
PyGILState_GetThisThreadState
_PyType_Lookup
PyEval_AcquireThread
PyUnicode_FromString
PyNumber_Or
PyDict_DelItemString
PyException_SetCause
PyObject_SetItem
PyExc_SystemError
_Py_TrueStruct
PyCapsule_SetPointer
PyExc_ImportError
PyExc_IndexError
PyFrame_GetCode
PyFrame_GetBack
PyCallable_Check
PyModule_Type
PyUnicode_AsUTF8String
PyObject_Str
PyDict_Copy
PyEval_GetBuiltins
PyCapsule_Type
PyThreadState_Clear
PyExc_TypeError
PyThreadState_DeleteCurrent
PyThread_tss_alloc
PyNumber_Long
PyNumber_Check
PyCapsule_SetContext
PyGILState_Ensure
_Py_NotImplementedStruct
PyBytes_FromStringAndSize
PyIndex_Check
PyProperty_Type
PyObject_HasAttrString
PyObject_CallObject
PyObject_GetItem
PyUnicode_DecodeLatin1
PyThread_tss_set
PyCMethod_New
PyTuple_SetItem
PyExc_StopIteration
PyMem_Free
PyObject_IsInstance
PyInstanceMethod_New
PyException_SetContext
PySequence_Check
PyList_GetItem
PyDict_New
PyBytes_Size
PyCapsule_GetName
PyCapsule_New
PyException_SetTraceback
PyThread_tss_get
PyTuple_Size
PyObject_RichCompareBool
PyList_Append
PyErr_Clear
PyErr_NewException
PyObject_GetAttrString
PyType_Ready
PyNumber_Invert
PyModule_Create2
PyList_New
PyThread_tss_create
PyObject_ClearWeakRefs
PyLong_AsLong
PyObject_CallFunctionObjArgs
PyErr_Fetch
PyModule_AddObject
PyNumber_And
PyCapsule_GetPointer
PyUnicode_FromFormat
PyTuple_GetItem
_Py_Dealloc
PyExc_OverflowError
PyErr_Restore
PyType_IsSubtype
PyMethod_Type
PyFloat_Type
_Py_FalseStruct
PyThreadState_New
PyDict_Type
PyErr_Format
PyDict_Next
PyExc_ValueError
PyErr_WriteUnraisable
PyErr_SetString
PyList_Size
PyExc_AttributeError
PyFloat_FromDouble
PyLong_FromLongLong
PyDict_Size
PyTuple_New
PyLong_AsLongLong
_Py_NoneStruct
PyBytes_AsStringAndSize
PyGILState_Release
PyLong_AsUnsignedLongLong
PyFloat_AsDouble
PyFrame_GetLineNumber
PyDict_Contains
PyCapsule_GetContext
Py_GetVersion
PyLong_FromUnsignedLongLong
PyDict_GetItemWithError
PyExc_MemoryError
PyNumber_Xor
PyInstanceMethod_Type
PyLong_FromLong
PyObject_SetAttrString
PyExc_RuntimeError
_PyThreadState_UncheckedGet
PyEval_SaveThread
PyUnicode_AsUTF8AndSize
PyUnicode_DecodeUTF8
PyLong_FromSsize_t
PyErr_Occurred
PySequence_GetItem
PyErr_NormalizeException
PyBytes_AsString
PyExc_KeyError
PyObject_Malloc
PyLong_AsUnsignedLong
PyErr_GivenExceptionMatches
PyExc_Exception
PyThreadState_Get
PyWeakref_NewRef
PyCFunction_Type
PyObject_SetAttr
PyExc_BufferError
PyMem_Calloc
PyBaseObject_Type
PySequence_Size

shlwapi

PathIsRelativeA
PathRemoveFileSpecA

kernel32

AcquireSRWLockShared
AcquireSRWLockExclusive
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
SleepConditionVariableSRW
WakeAllConditionVariable
InitOnceComplete
InitOnceBeginInitialize
WideCharToMultiByte
MultiByteToWideChar
GetFileInformationByHandleEx
GetLastError
CloseHandle
AreFileApisANSI
GetFileAttributesExW
FindNextFileW
FindFirstFileExW
FindFirstFileW
FindClose
CreateFileW
GetLocaleInfoEx
FormatMessageA
LocalFree
ReleaseSRWLockShared
ReleaseSRWLockExclusive
GetFullPathNameA

msvcp140

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?id@?$ctype@D@std@@2V0locale@2@A
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?_Getname@_Locinfo@std@@QEBAPEBDXZ
??0_Locinfo@std@@QEAA@HPEBD@Z
?_Xruntime_error@std@@YAXPEBD@Z
?id@?$numpunct@D@std@@2V0locale@2@A
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QEBA_JXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_K@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?fail@ios_base@std@@QEBA_NXZ
?eof@ios_base@std@@QEBA_NXZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
??Bid@locale@std@@QEAA_KXZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??Bios_base@std@@QEBA_NXZ
?_Winerror_map@std@@YAHH@Z
?_Syserror_map@std@@YAPEBDH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
?precision@ios_base@std@@QEAA_J_J@Z
?setf@ios_base@std@@QEAAHHH@Z
?setf@ios_base@std@@QEAAHH@Z
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?good@ios_base@std@@QEBA_NXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?_Incref@facet@locale@std@@UEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?uncaught_exception@std@@YA_NXZ
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCompare@@YA_NPEBX0@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_type_info_compare
_purecall
__std_type_info_name
__std_terminate
__RTtypeid
memcpy
_CxxThrowException
memchr
memmove
memset
memcmp
__RTDynamicCast
strchr
__std_type_info_destroy_list
__current_exception
__current_exception_context
__C_specific_handler
__std_exception_destroy
__RTCastToVoid
__std_exception_copy

api-ms-win-crt-heap-l1-1-0

calloc
free
malloc
_aligned_malloc
_callnewh
_aligned_free

api-ms-win-crt-string-l1-1-0

strncpy_s
isdigit
tolower
isalpha
strncmp
_strdup
strcmp
toupper

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_initterm
_cexit
_initialize_narrow_environment
_configure_narrow_argv
abort
_register_onexit_function
_crt_atexit
_seh_filter_dll
terminate
_errno
_invalid_parameter_noinfo_noreturn
_initterm_e
_execute_onexit_table

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-math-l1-1-0

_dsign
_ldsign
ceilf

api-ms-win-crt-stdio-l1-1-0

fclose
fflush
__acrt_iob_func
fgetc
__stdio_common_vsprintf
fgetpos
__stdio_common_vsnprintf_s
ungetc
setvbuf
fwrite
_fseeki64
fsetpos
fread
fputc
_get_stream_buffer_pointers

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file

api-ms-win-crt-convert-l1-1-0

strtod
strtoll
strtoull

api-ms-win-crt-locale-l1-1-0

localeconv
___lc_codepage_func

Exports

Exports

??0attribute_error@pybind11@@QEAA@$$QEAV01@@Z
??0attribute_error@pybind11@@QEAA@AEBV01@@Z
??0attribute_error@pybind11@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0attribute_error@pybind11@@QEAA@PEBD@Z
??0attribute_error@pybind11@@QEAA@XZ
??0buffer_error@pybind11@@QEAA@$$QEAV01@@Z
??0buffer_error@pybind11@@QEAA@AEBV01@@Z
??0buffer_error@pybind11@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0buffer_error@pybind11@@QEAA@PEBD@Z
??0buffer_error@pybind11@@QEAA@XZ
??0builtin_exception@pybind11@@QEAA@$$QEAV01@@Z
??0builtin_exception@pybind11@@QEAA@AEBV01@@Z
??0builtin_exception@pybind11@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0builtin_exception@pybind11@@QEAA@PEBD@Z
??0cast_error@pybind11@@QEAA@$$QEAV01@@Z
??0cast_error@pybind11@@QEAA@AEBV01@@Z
??0cast_error@pybind11@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0cast_error@pybind11@@QEAA@PEBD@Z
??0cast_error@pybind11@@QEAA@XZ
??0error_already_set@pybind11@@QEAA@$$QEAV01@@Z
??0error_already_set@pybind11@@QEAA@AEBV01@@Z
??0error_already_set@pybind11@@QEAA@XZ
??0import_error@pybind11@@QEAA@$$QEAV01@@Z
??0import_error@pybind11@@QEAA@AEBV01@@Z
??0import_error@pybind11@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0import_error@pybind11@@QEAA@PEBD@Z
??0import_error@pybind11@@QEAA@XZ
??0index_error@pybind11@@QEAA@$$QEAV01@@Z
??0index_error@pybind11@@QEAA@AEBV01@@Z
??0index_error@pybind11@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0index_error@pybind11@@QEAA@PEBD@Z
??0index_error@pybind11@@QEAA@XZ
??0key_error@pybind11@@QEAA@$$QEAV01@@Z
??0key_error@pybind11@@QEAA@AEBV01@@Z
??0key_error@pybind11@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0key_error@pybind11@@QEAA@PEBD@Z
??0key_error@pybind11@@QEAA@XZ
??0reference_cast_error@pybind11@@QEAA@$$QEAV01@@Z
??0reference_cast_error@pybind11@@QEAA@AEBV01@@Z
??0reference_cast_error@pybind11@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0reference_cast_error@pybind11@@QEAA@PEBD@Z
??0reference_cast_error@pybind11@@QEAA@XZ
??0stop_iteration@pybind11@@QEAA@$$QEAV01@@Z
??0stop_iteration@pybind11@@QEAA@AEBV01@@Z
??0stop_iteration@pybind11@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0stop_iteration@pybind11@@QEAA@PEBD@Z
??0stop_iteration@pybind11@@QEAA@XZ
??0type_error@pybind11@@QEAA@$$QEAV01@@Z
??0type_error@pybind11@@QEAA@AEBV01@@Z
??0type_error@pybind11@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0type_error@pybind11@@QEAA@PEBD@Z
??0type_error@pybind11@@QEAA@XZ
??0value_error@pybind11@@QEAA@$$QEAV01@@Z
??0value_error@pybind11@@QEAA@AEBV01@@Z
??0value_error@pybind11@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0value_error@pybind11@@QEAA@PEBD@Z
??0value_error@pybind11@@QEAA@XZ
??1attribute_error@pybind11@@UEAA@XZ
??1buffer_error@pybind11@@UEAA@XZ
??1builtin_exception@pybind11@@UEAA@XZ
??1cast_error@pybind11@@UEAA@XZ
??1error_already_set@pybind11@@UEAA@XZ
??1import_error@pybind11@@UEAA@XZ
??1index_error@pybind11@@UEAA@XZ
??1key_error@pybind11@@UEAA@XZ
??1reference_cast_error@pybind11@@UEAA@XZ
??1stop_iteration@pybind11@@UEAA@XZ
??1type_error@pybind11@@UEAA@XZ
??1value_error@pybind11@@UEAA@XZ
??4attribute_error@pybind11@@QEAAAEAV01@$$QEAV01@@Z
??4attribute_error@pybind11@@QEAAAEAV01@AEBV01@@Z
??4buffer_error@pybind11@@QEAAAEAV01@$$QEAV01@@Z
??4buffer_error@pybind11@@QEAAAEAV01@AEBV01@@Z
??4builtin_exception@pybind11@@QEAAAEAV01@$$QEAV01@@Z
??4builtin_exception@pybind11@@QEAAAEAV01@AEBV01@@Z
??4cast_error@pybind11@@QEAAAEAV01@$$QEAV01@@Z
??4cast_error@pybind11@@QEAAAEAV01@AEBV01@@Z
??4import_error@pybind11@@QEAAAEAV01@$$QEAV01@@Z
??4import_error@pybind11@@QEAAAEAV01@AEBV01@@Z
??4index_error@pybind11@@QEAAAEAV01@$$QEAV01@@Z
??4index_error@pybind11@@QEAAAEAV01@AEBV01@@Z
??4key_error@pybind11@@QEAAAEAV01@$$QEAV01@@Z
??4key_error@pybind11@@QEAAAEAV01@AEBV01@@Z
??4reference_cast_error@pybind11@@QEAAAEAV01@$$QEAV01@@Z
??4reference_cast_error@pybind11@@QEAAAEAV01@AEBV01@@Z
??4stop_iteration@pybind11@@QEAAAEAV01@$$QEAV01@@Z
??4stop_iteration@pybind11@@QEAAAEAV01@AEBV01@@Z
??4type_error@pybind11@@QEAAAEAV01@$$QEAV01@@Z
??4type_error@pybind11@@QEAAAEAV01@AEBV01@@Z
??4value_error@pybind11@@QEAAAEAV01@$$QEAV01@@Z
??4value_error@pybind11@@QEAAAEAV01@AEBV01@@Z
??_7attribute_error@pybind11@@6B@
??_7buffer_error@pybind11@@6B@
??_7builtin_exception@pybind11@@6B@
??_7cast_error@pybind11@@6B@
??_7error_already_set@pybind11@@6B@
??_7import_error@pybind11@@6B@
??_7index_error@pybind11@@6B@
??_7key_error@pybind11@@6B@
??_7reference_cast_error@pybind11@@6B@
??_7stop_iteration@pybind11@@6B@
??_7type_error@pybind11@@6B@
??_7value_error@pybind11@@6B@
?clear@error_already_set@pybind11@@QEAAXXZ
?discard_as_unraisable@error_already_set@pybind11@@QEAAXPEBD@Z
?discard_as_unraisable@error_already_set@pybind11@@QEAAXVobject@2@@Z
?matches@error_already_set@pybind11@@QEBA_NVhandle@2@@Z
?restore@error_already_set@pybind11@@QEAAXXZ
?set_error@attribute_error@pybind11@@UEBAXXZ
?set_error@buffer_error@pybind11@@UEBAXXZ
?set_error@cast_error@pybind11@@UEBAXXZ
?set_error@import_error@pybind11@@UEBAXXZ
?set_error@index_error@pybind11@@UEBAXXZ
?set_error@key_error@pybind11@@UEBAXXZ
?set_error@reference_cast_error@pybind11@@UEBAXXZ
?set_error@stop_iteration@pybind11@@UEBAXXZ
?set_error@type_error@pybind11@@UEBAXXZ
?set_error@value_error@pybind11@@UEBAXXZ
?trace@error_already_set@pybind11@@QEBAAEBVobject@2@XZ
?type@error_already_set@pybind11@@QEBAAEBVobject@2@XZ
?value@error_already_set@pybind11@@QEBAAEBVobject@2@XZ
PyInit_yaramod

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 672KB - Virtual size: 671KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 124KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

75dd7619b9e0306634dfe666e1d0c5a8

Headers

DLL Characteristics

File Characteristics

Imports

python311

shlwapi

kernel32

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-locale-l1-1-0

Exports

Exports

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

.rdata Size: 672KB - Virtual size: 671KB

.data Size: 124KB - Virtual size: 125KB

.pdata Size: 83KB - Virtual size: 83KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 14KB - Virtual size: 14KB

.text
Size: 2.1MB - Virtual size: 2.1MB

.rdata
Size: 672KB - Virtual size: 671KB

.data
Size: 124KB - Virtual size: 125KB

.pdata
Size: 83KB - Virtual size: 83KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 14KB - Virtual size: 14KB