xlwings-0[.]31[.]10-cp38-cp38-win_amd64[.]whl

Sharing

Copy URL

Twitter E-mail

General

Target

xlwings-0.31.10-cp38-cp38-win_amd64.whl
Size

1.6MB
MD5

6bcbcd7db01582157ef54b447c02f5c2
SHA1

1edcb95f79687f07fb2f7241a8de738a8b130077
SHA256

1a09dc33b327233b2aa4cfddd0379600153e8d2ccb89b70de1336f1bc2c93c49
SHA512

a11dca905e327e5de9dd3db7f3b4c11b68e5163a122a2978d4e293408c5ab3d06f0395e0556b58770af324baf65d0f9a8da5da18e76c9906a0b46a89502f348a
SSDEEP

49152:NnSBbSGU0rRrCySLz4HydDzKPXOPUYrSsK:EBy0lrBSmyx7PUYjK

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with macros.

macro

resource
static1/unpack001/xlwings/addin/xlwings.xlam

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/xlwings/xlwingslib.cp38-win_amd64.pyd

Files

xlwings-0.31.10-cp38-cp38-win_amd64.whl
.zip
xlwings-0.31.10.data/data/xlwings32-0.31.10.dll
.dll windows:6 windows x86 arch:x86

f2019d84232985cf0449fa974343776b

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-05-2021 00:00

Not After

31-12-2028 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22-03-2021 00:00

Not After

21-03-2036 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

38:33:f4:12:a6:e9:4b:31:f6:6f:93:f0:38:99:b9:92
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

15-03-2023 00:00

Not After

14-03-2026 23:59

Subject

CN=Zoomer Analytics GmbH,O=Zoomer Analytics GmbH,ST=Zürich,C=CH

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-05-2023 00:00

Not After

02-08-2034 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

bc:01:9e:35:b0:e8:ef:53:f5:d3:e9:71:33:97:3e:cf:42:a6:f0:83:30:b6:70:42:e3:71:09:50:6f:3d:a7:e5
Signer

Actual PE Digest

bc:01:9e:35:b0:e8:ef:53:f5:d3:e9:71:33:97:3e:cf:42:a6:f0:83:30:b6:70:42:e3:71:09:50:6f:3d:a7:e5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\a\xlwings\xlwings\xlwingsdll\Win32\Release\xlwings32.pdb

Imports

kernel32

SetInformationJobObject
CompareFileTime
AssignProcessToJobObject
CreateJobObjectW
GetFullPathNameA
Sleep
CreateFileA
CloseHandle
GetEnvironmentStrings
CreateProcessA
GetExitCodeProcess
GetModuleFileNameA
GetCurrentDirectoryA
SetCurrentDirectoryA
MultiByteToWideChar
GetLastError
LocalFree
WideCharToMultiByte
FormatMessageA
GetFileTime
SetEndOfFile
WriteConsoleW
HeapSize
CreateFileW
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
RaiseException
InterlockedFlushSList
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetFileSizeEx
SetFilePointerEx
GetStdHandle
GetFileType
HeapAlloc
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
HeapFree
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadFile
ReadConsoleW
HeapReAlloc
FindClose

ole32

CoCreateInstance
CoCreateGuid

oleaut32

SysAllocStringByteLen
VariantCopy
SafeArrayUnaccessData
SafeArrayCreate
SafeArrayDestroy
SysAllocString
SysStringLen
VariantInit
SysFreeString
VariantClear
SafeArrayAccessData

Exports

Exports

XLPyDLLActivate
XLPyDLLActivateAuto
XLPyDLLNDims
XLPyDLLVersion

Sections

.text
Size: 217KB - Virtual size: 217KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
xlwings-0.31.10.data/data/xlwings64-0.31.10.dll
.dll windows:6 windows x64 arch:x64

e98c47c9441b7fc3fb01103d2aea19d2

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-05-2021 00:00

Not After

31-12-2028 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22-03-2021 00:00

Not After

21-03-2036 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

38:33:f4:12:a6:e9:4b:31:f6:6f:93:f0:38:99:b9:92
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

15-03-2023 00:00

Not After

14-03-2026 23:59

Subject

CN=Zoomer Analytics GmbH,O=Zoomer Analytics GmbH,ST=Zürich,C=CH

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-05-2023 00:00

Not After

02-08-2034 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

21:ee:6e:24:ab:49:68:3f:b1:fa:7c:2d:d3:84:27:ef:ad:f7:80:97:d3:17:48:eb:3c:d2:bd:e7:16:6c:46:65
Signer

Actual PE Digest

21:ee:6e:24:ab:49:68:3f:b1:fa:7c:2d:d3:84:27:ef:ad:f7:80:97:d3:17:48:eb:3c:d2:bd:e7:16:6c:46:65

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\xlwings\xlwings\xlwingsdll\x64\Release\xlwings64.pdb

Imports

kernel32

SetInformationJobObject
CompareFileTime
AssignProcessToJobObject
CreateJobObjectW
GetFullPathNameA
Sleep
CreateFileA
CloseHandle
GetEnvironmentStrings
CreateProcessA
GetExitCodeProcess
GetModuleFileNameA
GetCurrentDirectoryA
SetCurrentDirectoryA
MultiByteToWideChar
GetLastError
LocalFree
WideCharToMultiByte
FormatMessageA
GetFileTime
SetEndOfFile
WriteConsoleW
HeapSize
CreateFileW
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetFileSizeEx
SetFilePointerEx
GetStdHandle
GetFileType
HeapAlloc
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
HeapFree
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadFile
ReadConsoleW
HeapReAlloc
FindClose
FindFirstFileExW
RtlUnwind

ole32

CoCreateInstance
CoCreateGuid

oleaut32

SysAllocStringByteLen
VariantCopy
SafeArrayUnaccessData
SafeArrayCreate
SafeArrayDestroy
SysAllocString
SysStringLen
VariantInit
SysFreeString
VariantClear
SafeArrayAccessData

Exports

Exports

XLPyDLLActivate
XLPyDLLActivateAuto
XLPyDLLNDims
XLPyDLLVersion

Sections

.text
Size: 261KB - Virtual size: 261KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
xlwings-0.31.10.dist-info/LICENSE.txt
xlwings-0.31.10.dist-info/LICENSE_PRO.txt
xlwings-0.31.10.dist-info/METADATA
xlwings-0.31.10.dist-info/RECORD
xlwings-0.31.10.dist-info/WHEEL
xlwings-0.31.10.dist-info/entry_points.txt
xlwings-0.31.10.dist-info/top_level.txt
xlwings/__init__.py
xlwings/_win32patch.py
xlwings/_xlmac.py
xlwings/_xlwindows.py
xlwings/addin/Dictionary.cls
.vbs
xlwings/addin/IWebAuthenticator.cls
xlwings/addin/WebClient.cls
.vbs
xlwings/addin/WebHelpers.bas
.vbs
xlwings/addin/WebRequest.cls
.vbs
xlwings/addin/WebResponse.cls
.vbs
xlwings/addin/xlwings.xlam
.xlam office2007

ThisWorkbook

Sheet1

WebHelpers

License

Dictionary

IWebAuthenticator

Utils

RibbonXlwings

Config

WebClient

WebRequest

Main

Remote

Extensions

WebResponse
xlwings/base_classes.py
xlwings/cli.py
xlwings/com_server.py
.py .js
xlwings/constants.py
xlwings/conversion/__init__.py
xlwings/conversion/framework.py
xlwings/conversion/numpy_conv.py
xlwings/conversion/pandas_conv.py
xlwings/conversion/standard.py
xlwings/expansion.py
xlwings/ext/__init__.py
xlwings/ext/sql.py
xlwings/html/xlwings-alert.html
xlwings/js/xlwings.js
.js
xlwings/js/xlwings.ts
.js
xlwings/mac_dict.py
xlwings/main.py
.py .vbs
xlwings/mistune/__init__.py
xlwings/mistune/block_parser.py
xlwings/mistune/directives/__init__.py
xlwings/mistune/directives/admonition.py
xlwings/mistune/directives/base.py
xlwings/mistune/directives/include.py
xlwings/mistune/directives/toc.py
xlwings/mistune/inline_parser.py
xlwings/mistune/markdown.py
xlwings/mistune/plugins/__init__.py
xlwings/mistune/plugins/abbr.py
xlwings/mistune/plugins/def_list.py
xlwings/mistune/plugins/extra.py
xlwings/mistune/plugins/footnotes.py
xlwings/mistune/plugins/table.py
xlwings/mistune/plugins/task_lists.py
xlwings/mistune/renderers.py
xlwings/mistune/scanner.py
xlwings/mistune/util.py
xlwings/pro/__init__.py
xlwings/pro/_xlcalamine.py
xlwings/pro/_xlofficejs.py
xlwings/pro/_xlremote.py
xlwings/pro/custom_functions_code.js
.js
xlwings/pro/embedded_code.py
xlwings/pro/reports/__init__.py
xlwings/pro/reports/filters.py
xlwings/pro/reports/image.py
xlwings/pro/reports/main.py
xlwings/pro/reports/markdown.py
xlwings/pro/reports/pdf.py
xlwings/pro/udfs_officejs.py
.py .js
xlwings/pro/utils.py
xlwings/quickstart.xlsm
.xlsm office2007
xlwings/quickstart_addin.xlam
.xlam office2007

ThisWorkbook

Dictionary

xlwings

Sheet2

Module1
xlwings/quickstart_addin_ribbon.xlam
.xlam office2007

ThisWorkbook

Dictionary

RibbonMyAddin

Sheet2

xlwings
xlwings/quickstart_fastapi/main.py
xlwings/quickstart_fastapi/requirements.txt
xlwings/quickstart_standalone.xlsm
.xlsm office2007

ThisWorkbook

Sheet1

Module1

Sheet2

xlwings

Dictionary
xlwings/reports.py
xlwings/rest/__init__.py
xlwings/rest/api.py
xlwings/rest/serializers.py
xlwings/server.py
xlwings/udfs.py
xlwings/utils.py
xlwings/xlwings-0.31.10.applescript
xlwings/xlwings.bas
.vbs
xlwings/xlwings_custom_addin.bas
.vbs
xlwings/xlwingslib.cp38-win_amd64.pyd
.dll windows:6 windows x64 arch:x64

01fd019798768b609dc49f348d832820

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

xlwings.pdb

Imports

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WaitOnAddress
WakeByAddressSingle
WakeByAddressAll

kernel32

SetFileInformationByHandle
GetCurrentProcess
SetFilePointerEx
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
UnhandledExceptionFilter
GetEnvironmentVariableW
GetCurrentDirectoryW
SetLastError
RtlVirtualUnwind
GetStdHandle
GetCurrentProcessId
RtlLookupFunctionEntry
RtlCaptureContext
QueryPerformanceFrequency
HeapFree
HeapReAlloc
QueryPerformanceCounter
ReleaseMutex
GetProcessHeap
HeapAlloc
CreateFileW
GetFileInformationByHandle
GetFileInformationByHandleEx
WaitForSingleObject
GetConsoleMode
GetModuleHandleW
FormatMessageW
MultiByteToWideChar
WriteConsoleW
GetFullPathNameW
GetLastError
WaitForSingleObjectEx
LoadLibraryA
CreateMutexA
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleA
Sleep
CloseHandle
lstrlenW
IsProcessorFeaturePresent

ntdll

NtWriteFile
NtReadFile
RtlNtStatusToDosError

python38

PyUnicode_InternInPlace
PyUnicode_AsEncodedString
PyBytes_AsString
PyBytes_Size
PyException_GetCause
PyObject_Repr
PyObject_Str
PyErr_Restore
PyErr_WriteUnraisable
PyExc_TypeError
PyException_GetTraceback
PyException_SetTraceback
PyErr_Fetch
PyErr_PrintEx
PyErr_NewExceptionWithDoc
PyException_SetCause
PyGILState_Release
PyErr_Print
Py_IsInitialized
PyGILState_Ensure
_Py_Dealloc
PyExc_OverflowError
PyExc_IOError
PyNumber_Index
PyLong_AsUnsignedLongLong
PyObject_Call
PyExc_AttributeError
PyErr_GivenExceptionMatches
PyObject_GetAttr
PyObject_SetAttr
PyBool_Type
PyFloat_FromDouble
PyTraceBack_Print
PyExc_ImportError
PyModule_Create2
PyUnicode_FromStringAndSize
PyExc_BaseException
PyErr_NormalizeException
PyCFunction_NewEx
PyList_Append
PyModule_GetName
PyCapsule_Import
_Py_TrueStruct
_Py_NoneStruct
_Py_FalseStruct
PyList_New
PyTuple_SetItem
PyTuple_New
PyImport_Import
PyUnicode_AsUTF8AndSize
PyExc_SystemError
PyExc_ValueError
PyLong_FromLongLong

vcruntime140

__CxxFrameHandler3
__std_type_info_destroy_list
memcpy
__C_specific_handler
memmove
memcmp
memset
_CxxThrowException

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-math-l1-1-0

round

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_seh_filter_dll
_initterm_e
_execute_onexit_table
_cexit
_initterm

api-ms-win-crt-heap-l1-1-0

free

Exports

Exports

PyInit_xlwingslib

Sections

.text
Size: 645KB - Virtual size: 644KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 371KB - Virtual size: 371KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
xlwingsjs/build.py
xlwingsjs/check_version.py
xlwingsjs/custom_functions.py
xlwingsjs/devserver.py
xlwingsjs/tests/udf_tests_officejs.py

Sharing

General

Malware Config

Signatures

Files

f2019d84232985cf0449fa974343776b

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

38:33:f4:12:a6:e9:4b:31:f6:6f:93:f0:38:99:b9:92Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

bc:01:9e:35:b0:e8:ef:53:f5:d3:e9:71:33:97:3e:cf:42:a6:f0:83:30:b6:70:42:e3:71:09:50:6f:3d:a7:e5Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 217KB - Virtual size: 217KB

.rdata Size: 63KB - Virtual size: 62KB

.data Size: 4KB - Virtual size: 8KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 9KB - Virtual size: 9KB

e98c47c9441b7fc3fb01103d2aea19d2

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

38:33:f4:12:a6:e9:4b:31:f6:6f:93:f0:38:99:b9:92Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

21:ee:6e:24:ab:49:68:3f:b1:fa:7c:2d:d3:84:27:ef:ad:f7:80:97:d3:17:48:eb:3c:d2:bd:e7:16:6c:46:65Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 261KB - Virtual size: 261KB

.rdata Size: 87KB - Virtual size: 87KB

.data Size: 5KB - Virtual size: 11KB

.pdata Size: 12KB - Virtual size: 11KB

_RDATA Size: 512B - Virtual size: 244B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 3KB - Virtual size: 2KB

ThisWorkbook

Sheet1

WebHelpers

License

Dictionary

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

38:33:f4:12:a6:e9:4b:31:f6:6f:93:f0:38:99:b9:92
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

bc:01:9e:35:b0:e8:ef:53:f5:d3:e9:71:33:97:3e:cf:42:a6:f0:83:30:b6:70:42:e3:71:09:50:6f:3d:a7:e5
Signer

.text
Size: 217KB - Virtual size: 217KB

.rdata
Size: 63KB - Virtual size: 62KB

.data
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 9KB - Virtual size: 9KB

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

38:33:f4:12:a6:e9:4b:31:f6:6f:93:f0:38:99:b9:92
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

21:ee:6e:24:ab:49:68:3f:b1:fa:7c:2d:d3:84:27:ef:ad:f7:80:97:d3:17:48:eb:3c:d2:bd:e7:16:6c:46:65
Signer

.text
Size: 261KB - Virtual size: 261KB

.rdata
Size: 87KB - Virtual size: 87KB

.data
Size: 5KB - Virtual size: 11KB

.pdata
Size: 12KB - Virtual size: 11KB

_RDATA
Size: 512B - Virtual size: 244B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 3KB - Virtual size: 2KB

.text
Size: 645KB - Virtual size: 644KB

.rdata
Size: 371KB - Virtual size: 371KB

.data
Size: 1024B - Virtual size: 1KB

.pdata
Size: 22KB - Virtual size: 22KB

.reloc
Size: 7KB - Virtual size: 7KB