2c7b673149a6dd119dd6910dc807d9a54aee1d3e2979a098e57d28393e79f533

General

Target
2c7b673149a6dd119dd6910dc807d9a54aee1d3e2979a098e57d28393e79f533
Size 41KB
Sample260910-ng4z5awsdw
SHA256 2c7b673149a6dd119dd6910dc807d9a54aee1d3e2979a098e57d28393e79f533
MD5 75e8e9d2d155c928521d1a46650cf02e
SHA1 4914b789a853a5acbac4a99a38c1797b069ae7b1
SHA512 e3a4b4999144659feb387fa6f08ae5b65b83ad6e7988927bf08b9b7c2a4765782cb31ab5e5dc2590717c88c04ba5676f17b33f47f945154c3048b4b98e95133f
SSDEEP 768:ykoqdyteO8sCK/oQaFd7YnHqhrvjZpBJQcewS0:WsycSxoQaFd7mWrvpJHew
TLSH
T19F13280266D48093EE9386F4C8776E17E7F1B415361167CF42A4C9C52FA2E9BA3FD242
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c7b673149a6dd119dd6910dc807d9a54aee1d3e2979a098e57d28393e79f533

File Explorer

2c7b673149a6dd119dd6910dc807d9a54aee1d3e2979a098e57d28393e79f533

.dll 41KB

2c7b673149a6dd119dd6910dc807d9a54aee1d3e2979a098e57d28393e79f533

IMPHASH 0e29510c7d97bf776590929ea7090bf0
SHA256 2c7b673149a6dd119dd6910dc807d9a54aee1d3e2979a098e57d28393e79f533
MD5 75e8e9d2d155c928521d1a46650cf02e
SHA1 4914b789a853a5acbac4a99a38c1797b069ae7b1
SHA512 e3a4b4999144659feb387fa6f08ae5b65b83ad6e7988927bf08b9b7c2a4765782cb31ab5e5dc2590717c88c04ba5676f17b33f47f945154c3048b4b98e95133f
SSDEEP 768:ykoqdyteO8sCK/oQaFd7YnHqhrvjZpBJQcewS0:WsycSxoQaFd7mWrvpJHew
TLSH
T19F13280266D48093EE9386F4C8776E17E7F1B415361167CF42A4C9C52FA2E9BA3FD242
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

28980

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

python313

_Py_NoneStruct PyTuple_New PyDict_SetItemString PyExc_AttributeError PyUnicode_New PyExc_SystemExit PyErr_SetString PyObject_GetIter PyNumber_Add PyUnicode_InternInPlace PyDict_Next PyErr_Format PyDict_Type PyThreadState_GetUnchecked PyObject_RichCompare PyTuple_Type _Py_FalseStruct PyImport_GetModule PyFloat_Type PyModule_NewObject PyMethod_Type PyLong_Type PyType_IsSubtype PyExc_OverflowError _Py_Dealloc PyImport_GetModuleDict PyModule_GetDict PyObject_Format PyErr_ExceptionMatches PyUnicode_FindChar PyObject_CallFunctionObjArgs PyObject_Vectorcall Py_Version PyList_New PyObject_GetAttrString PyList_Append PyObject_RichCompareBool PyException_SetTraceback PyObject_VectorcallDict PyDict_SetItem PyDict_New PyUnicode_Type _PyDict_GetItem_KnownHash PyObject_VectorcallMethod PyExc_StopIteration PyObject_GetOptionalAttr PyCMethod_New PyList_Type PyDict_GetItemString PyObject_GetItem PyModuleDef_Init PyBytes_FromStringAndSize PyDict_GetItemRef PyExc_TypeError PyMem_Realloc PyObject_IsTrue PyExc_NameError PyTuple_Pack PyMem_Malloc Py_EnterRecursiveCall PyExc_ImportError _Py_TrueStruct PyMemoryView_FromMemory PyExc_SystemError PyNumber_TrueDivide PyUnicode_FromString PyObject_Size PyObject_Call PyUnicode_Substring PyUnicode_FromStringAndSize PyModule_GetName PyObject_GetAttr PyInterpreterState_GetID PyUnicode_Concat PyObject_Hash PyLong_FromLong PyObject_SetAttrString PyExc_RuntimeError PyTraceBack_Here PyUnicode_DecodeUTF8 PyLong_FromSsize_t PyArg_ValidateKeywordArguments PyErr_Occurred PyImport_ImportModuleLevelObject PyImport_ImportModule PyImport_AddModuleRef Py_LeaveRecursiveCall PyFrame_New PyErr_WarnEx PyErr_GivenExceptionMatches PyObject_HasAttrWithError PyCode_NewEmpty PyErr_SetObject PyThreadState_Get PyOS_snprintf PyCFunction_Type PyObject_SetAttr PyBaseObject_Type PyErr_Clear PyUnicode_CopyCharacters

kernel32

DisableThreadLibraryCalls QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead

vcruntime140

memcpy __C_specific_handler __std_type_info_destroy_list memcmp

api-ms-win-crt-runtime-l1-1-0

_initterm_e _seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _initterm _execute_onexit_table _cexit

Sharing

General

Malware Config

Signatures

File Explorer

2c7b673149a6dd119dd6910dc807d9a54aee1d3e2979a098e57d28393e79f533

python313

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

generic