ce2260cd761d479f1e8bfee490547525c860223c80974711da575c3250526200N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

ce2260cd761d479f1e8bfee490547525c860223c80974711da575c3250526200N.exe
Size

47KB
MD5

6522168cd8d1c4bea20d0b655d9ebe70
SHA1

f8f4afedbf167b886a93412e5be9d13196fd8690
SHA256

ce2260cd761d479f1e8bfee490547525c860223c80974711da575c3250526200
SHA512

e66bbb0831e7a15209797c25dcbcbd1539c7cdf73e939e14b1e08d82dcc2304a8e8d220938a1ede9d2e4369fc8eb1ce841535dbf5d4c01b13a33d7b014f89d5c
SSDEEP

768:znvx9oGi8a2XaDtVQcSfgPepPDKOWFAQG6pr4mU5vUDXiQmgykeXJ2l+zvoIXv:zvCsqD7QFfGW2OWo6pr4mU5vUDXnm1k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce2260cd761d479f1e8bfee490547525c860223c80974711da575c3250526200N.exe

Files

ce2260cd761d479f1e8bfee490547525c860223c80974711da575c3250526200N.exe
.dll windows:6 windows x86 arch:x86

67e2984fd1e1a909c330189ef8591360

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

sdl2

SDL_SetSurfaceBlendMode
SDL_MapRGB
SDL_MapRGBA
SDL_GetSurfaceAlphaMod
SDL_SetPaletteColors
SDL_HasSSE
SDL_GetRGB
SDL_SetColorKey
SDL_GetError
SDL_SetSurfaceAlphaMod
SDL_GetColorKey
SDL_HasMMX
SDL_GetSurfaceBlendMode
SDL_SetSurfaceRLE
SDL_CreateRGBSurface
SDL_FreeSurface
SDL_LockSurface
SDL_UpperBlit
SDL_UnlockSurface
SDL_GetRGBA

python39

_Py_Dealloc
PyErr_Format
_PyArg_ParseTupleAndKeywords_SizeT
PyExc_ValueError
PyCapsule_GetPointer
_Py_NoneStruct
PyExc_MemoryError
PyLong_FromLong
PyLong_AsLong
PyModule_Create2
PyObject_GetAttrString
PyErr_Clear
PySequence_Check
PyObject_IsInstance
PyExc_TypeError
PyCapsule_Type
PyModule_GetState
PyObject_Size
PyEval_RestoreThread
PyEval_SaveThread
PyErr_SetString
PyErr_Occurred
PySequence_GetItem
PyImport_ImportModule
_Py_BuildValue_SizeT
PySequence_Size
PyUnicode_FromString

kernel32

UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter

vcruntime140

memset
__std_type_info_destroy_list
_except_handler4_common
memcpy

api-ms-win-crt-heap-l1-1-0

calloc
free
malloc

api-ms-win-crt-runtime-l1-1-0

_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e

api-ms-win-crt-math-l1-1-0

_libm_sse2_sin_precise
ceil
_except1
_CIfmod
_libm_sse2_cos_precise

Exports

Exports

PyInit_transform

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

67e2984fd1e1a909c330189ef8591360

Headers

DLL Characteristics

File Characteristics

Imports

sdl2

python39

kernel32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 35KB - Virtual size: 34KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 1024B - Virtual size: 1KB

.gfids Size: 512B - Virtual size: 20B

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 35KB - Virtual size: 34KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 1024B - Virtual size: 1KB

.gfids
Size: 512B - Virtual size: 20B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 2KB - Virtual size: 1KB