55347d24e57bfe0f73394725fcbddff8cc7e648eb522a87b8a81aaeaca2c4307

General

Target
55347d24e57bfe0f73394725fcbddff8cc7e648eb522a87b8a81aaeaca2c4307
Size 52KB
Sample260831-jaslaser3s
SHA256 55347d24e57bfe0f73394725fcbddff8cc7e648eb522a87b8a81aaeaca2c4307
MD5 3e8dda2ebbaabc59fe8d32aecef5706f
SHA1 193b2a6747451ff4c2860241ce056309d57bbf20
SHA512 5a5426c570a53dc2139cd6b82d8f47edf33ff226fa9e42b10366401a88d6546ea924c80d9b4ba28207b29439cd7f3cbcb4ff3222a89c98a2ff6b27fe298108c2
SSDEEP 768:Q4fVS+8629KgXKUW8eSnJ9xCOSjh/fErTfOZ07IovcV75Ob:vSh62rKUW8eMJ/CrCrTfOS7I6cV7Ab
TLSH
T12A332A45B2D40099E696E1BBC493274BE671F0D0172266CFB229DD901FF26D2BB7D30A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55347d24e57bfe0f73394725fcbddff8cc7e648eb522a87b8a81aaeaca2c4307

File Explorer

55347d24e57bfe0f73394725fcbddff8cc7e648eb522a87b8a81aaeaca2c4307

.dll 52KB

55347d24e57bfe0f73394725fcbddff8cc7e648eb522a87b8a81aaeaca2c4307

IMPHASH 20b2d400f2e47b6bfe5fd8992cd6b0d4
SHA256 55347d24e57bfe0f73394725fcbddff8cc7e648eb522a87b8a81aaeaca2c4307
MD5 3e8dda2ebbaabc59fe8d32aecef5706f
SHA1 193b2a6747451ff4c2860241ce056309d57bbf20
SHA512 5a5426c570a53dc2139cd6b82d8f47edf33ff226fa9e42b10366401a88d6546ea924c80d9b4ba28207b29439cd7f3cbcb4ff3222a89c98a2ff6b27fe298108c2
SSDEEP 768:Q4fVS+8629KgXKUW8eSnJ9xCOSjh/fErTfOZ07IovcV75Ob:vSh62rKUW8eMJ/CrCrTfOS7I6cV7Ab
TLSH
T12A332A45B2D40099E696E1BBC493274BE671F0D0172266CFB229DD901FF26D2BB7D30A
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

34660

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

python314t

PyExc_AttributeError PyUnicode_New PyErr_SetString PyObject_GetIter PyNumber_Add PyUnicode_InternInPlace PyDict_Next PyErr_Format PyDict_Type PyThreadState_GetUnchecked PyTuple_Type _Py_FalseStruct PyUnstable_Module_SetGIL PyImport_GetModule PyFloat_Type PyModule_NewObject PyMethod_Type PyLong_Type PyType_IsSubtype PyUnicode_Join PyExc_OverflowError PyImport_GetModuleDict PyModule_GetDict PyObject_Format PyErr_ExceptionMatches PyMapping_GetOptionalItem PyUnicode_FindChar PyObject_CallFunctionObjArgs PyObject_Vectorcall Py_Version PySet_New PyList_New PySlice_New PyObject_GetAttrString PyErr_Clear PyList_Append PySet_Add PyList_GetItemRef PyException_SetTraceback PySet_Type PyObject_VectorcallDict PyDict_SetItem PyDict_New PyUnicode_Type PyObject_VectorcallMethod PyExc_StopIteration PyObject_GetOptionalAttr PyUnstable_Object_IsUniquelyReferenced PyCMethod_New PyList_Type PyDict_GetItemString _Py_DecRefShared PyModuleDef_Init PyBytes_FromStringAndSize PyDict_GetItemRef PyExc_TypeError PyMem_Realloc PyObject_IsTrue PyExc_NameError PyTuple_Pack PyModule_Type PyMem_Malloc Py_EnterRecursiveCall PyExc_ImportError _Py_TrueStruct PyMemoryView_FromMemory PyExc_SystemError PyObject_SetItem PyCriticalSection_End PyMethodDescr_Type PyUnicode_FromString PyObject_Size PyObject_Call PyUnicode_Substring PyUnicode_FromStringAndSize PyDict_SetDefaultRef PyDict_SetItemString PySequence_Contains PyTuple_New _Py_NoneStruct PyObject_GetAttr PyInterpreterState_GetID PyUnicode_Concat PyObject_Hash PyLong_FromLong PyObject_SetAttrString PyExc_RuntimeError PyTraceBack_Here PyUnicode_DecodeUTF8 PyLong_FromSsize_t PyCriticalSection_Begin PyArg_ValidateKeywordArguments PyErr_Occurred PyImport_ImportModuleLevelObject PyImport_ImportModule Py_LeaveRecursiveCall PyFrame_New PyErr_WarnEx PyUnicode_Resize PyErr_GivenExceptionMatches PyCode_NewEmpty PyThreadState_Get PyOS_snprintf PyCFunction_Type PyObject_SetAttr PyBaseObject_Type PyUnicode_CopyCharacters PyObject_RichCompareBool _Py_MergeZeroLocalRefcount

kernel32

GetSystemTimeAsFileTime RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead DisableThreadLibraryCalls IsDebuggerPresent

vcruntime140

__C_specific_handler memset memcpy __std_type_info_destroy_list memcmp

api-ms-win-crt-runtime-l1-1-0

_initterm_e _seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _initterm _execute_onexit_table _cexit

Sharing

General

Malware Config

Signatures

File Explorer

55347d24e57bfe0f73394725fcbddff8cc7e648eb522a87b8a81aaeaca2c4307

python314t

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

generic