7e219c5a98b3b34d8311850baec4d49397a6c8a93421dc336f67a1178bcf2209

Sharing

Copy URL Twitter E-mail

General

Target

7e219c5a98b3b34d8311850baec4d49397a6c8a93421dc336f67a1178bcf2209
Size

17KB
MD5

1557777822f37976ce8494d11cb09571
SHA1

680078feb143d6b10f7cfd9474952fa7462f144c
SHA256

7e219c5a98b3b34d8311850baec4d49397a6c8a93421dc336f67a1178bcf2209
SHA512

5a43405258c5d903e243a4572ccebdab5cd29958f0bae6ecf324ab3c8f75441e661906325e7913b76f2a9c2f236445c67c4864a471c3c2f02cd31f35acdb5612
SSDEEP

384:vqB82DXHVem76Auc95tZ4z67ujNtJhjg:yXDXHVb76AP866E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7e219c5a98b3b34d8311850baec4d49397a6c8a93421dc336f67a1178bcf2209

Files

7e219c5a98b3b34d8311850baec4d49397a6c8a93421dc336f67a1178bcf2209
.dll windows:6 windows x64 arch:x64

e55b9880931b2ed69b1380bb4cdfda3f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

libpypy3.10-c

PyPyExc_KeyboardInterrupt
PyPyEval_SaveThread
PyPyLong_FromLong
PyPyLong_FromLongLong
PyPyList_GET_SIZE
PyPyExc_TypeError
PyPyBytes_Size
PyPyList_Type
PyPyBytes_AsString
PyPyMem_Malloc
PyPyLong_AsLong
_PyPy_Dealloc
PyPyErr_SetNone
PyPyErr_CheckSignals
PyPyBytes_FromStringAndSize
PyPyMem_Free
PyPyTuple_New
_PyPyArg_Parse_SizeT
PyPyList_Append
PyPyList_GET_ITEM
PyPyErr_NoMemory
PyPyModule_Create2
PyPyList_New
PyPyExc_ValueError
PyPyErr_SetString
PyPyEval_RestoreThread
_PyPyArg_ParseTuple_SizeT

kernel32

GetCurrentProcess
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
RtlCaptureContext

vcruntime140

memcpy
__C_specific_handler
memset
memcmp
__std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

_cexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm

Exports

Exports

PyInit_core

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e55b9880931b2ed69b1380bb4cdfda3f

Headers

DLL Characteristics

File Characteristics

Imports

libpypy3.10-c

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 1024B - Virtual size: 612B

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 68B

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 1024B - Virtual size: 612B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 68B