db8397088b9a9f550ced26d0181535f7c1901562e0cba499c3e277e67a4c154eN[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

db8397088b9a9f550ced26d0181535f7c1901562e0cba499c3e277e67a4c154eN.exe
Size

65KB
MD5

36eb6dbc91244a9d9f74536cc3d41b50
SHA1

abc5ee663cc2d3b9f29523c9891bce4faec1803b
SHA256

db8397088b9a9f550ced26d0181535f7c1901562e0cba499c3e277e67a4c154e
SHA512

c2e264ff41476db8a0afb5a8a79c7c09bb09ac6545209541f5cac839af70f307dec38e9ba20a3985659b46d5779a92e418b0f8c71258c404593e4fbe7c492d41
SSDEEP

768:eOLhfduRL3V8ZkzKmAaJpDejEgTXK1ZdZ+YjUSbHm/y+pJLLTXmONyf9oR5C:9LhiV8ZkHpkjE6GdZUF/bm+K9oR5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db8397088b9a9f550ced26d0181535f7c1901562e0cba499c3e277e67a4c154eN.exe

Files

db8397088b9a9f550ced26d0181535f7c1901562e0cba499c3e277e67a4c154eN.exe
.dll windows:6 windows x64 arch:x64

600d234945c87ce66650dbc0e686baa2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

python311

PyArg_ParseTupleAndKeywords
PyCapsule_GetName
PyCapsule_GetPointer
PyCapsule_New
PyCapsule_Type
PyDict_Next
PyDict_Size
PyErr_Clear
PyErr_ExceptionMatches
PyErr_Format
PyErr_Print
PyErr_SetString
PyEval_RestoreThread
PyEval_SaveThread
PyExc_ImportError
PyExc_KeyError
PyExc_MemoryError
PyExc_ModuleNotFoundError
PyExc_RuntimeError
PyExc_TypeError
PyExc_ValueError
PyFloat_AsDouble
PyFloat_Type
PyImport_ImportModule
PyIter_Next
PyLong_AsLong
PyModule_AddObject
PyModule_Create2
PyObject_GetAttrString
PyObject_GetIter
PyObject_Not
PySet_Type
PyType_IsSubtype
PyUnicode_FromStringAndSize
Py_BuildValue
_Py_Dealloc
_Py_FalseStruct
_Py_TrueStruct

msvcp140

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0ios_base@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1ios_base@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?good@ios_base@std@@QEBA_NXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IEAAXPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uncaught_exception@std@@YA_NXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z

kernel32

DisableThreadLibraryCalls
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter

vcruntime140

_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_destroy_list
memcpy
memmove
memset

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
_seh_filter_dll

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc

api-ms-win-crt-math-l1-1-0

pow

api-ms-win-crt-string-l1-1-0

strlen

Exports

Exports

PyInit_increments

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

600d234945c87ce66650dbc0e686baa2

Headers

DLL Characteristics

File Characteristics

Imports

python311

msvcp140

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

Exports

Exports

Sections

.text Size: 43KB - Virtual size: 43KB

.rdata Size: 17KB - Virtual size: 16KB

.data Size: 1KB - Virtual size: 2KB

.pdata Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 216B

.text
Size: 43KB - Virtual size: 43KB

.rdata
Size: 17KB - Virtual size: 16KB

.data
Size: 1KB - Virtual size: 2KB

.pdata
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 216B