45492e3e0910260fcc484a2cdb90bd6be0b21ac0ed04da3e50f94bc9de72b33f

General

Target
45492e3e0910260fcc484a2cdb90bd6be0b21ac0ed04da3e50f94bc9de72b33f
Size 41KB
Sample260910-tc9mpsdf67
SHA256 45492e3e0910260fcc484a2cdb90bd6be0b21ac0ed04da3e50f94bc9de72b33f
MD5 ad885f1e22bb1e9d35a64cc12ee00d54
SHA1 0f4ebef32bf6fcb401e398d37788ca9fa88f40be
SHA512 0d4eac7327872819d80cdf00cc675e25a7d4b39c3fa4ffad8894cc59979bf505e6ef7a70b4234b284138aeba38cfb6de3c970d43eed6a9a5b6792f8c1c97b9da
SSDEEP 768:/hhxXr1h+Xkh6D8VdsxtRfNtwuNNByJZ:5/+0DdQzfpTyJZ
TLSH
T10F133B0863944095E99782BCC83B5E17E6B1F8115710A7CF42A0E59E3FA37D723BEB42
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45492e3e0910260fcc484a2cdb90bd6be0b21ac0ed04da3e50f94bc9de72b33f

File Explorer

45492e3e0910260fcc484a2cdb90bd6be0b21ac0ed04da3e50f94bc9de72b33f

.dll 41KB

45492e3e0910260fcc484a2cdb90bd6be0b21ac0ed04da3e50f94bc9de72b33f

IMPHASH 0adbfa38e4a5625d6db58f0f51726b0d
SHA256 45492e3e0910260fcc484a2cdb90bd6be0b21ac0ed04da3e50f94bc9de72b33f
MD5 ad885f1e22bb1e9d35a64cc12ee00d54
SHA1 0f4ebef32bf6fcb401e398d37788ca9fa88f40be
SHA512 0d4eac7327872819d80cdf00cc675e25a7d4b39c3fa4ffad8894cc59979bf505e6ef7a70b4234b284138aeba38cfb6de3c970d43eed6a9a5b6792f8c1c97b9da
SSDEEP 768:/hhxXr1h+Xkh6D8VdsxtRfNtwuNNByJZ:5/+0DdQzfpTyJZ
TLSH
T10F133B0863944095E99782BCC83B5E17E6B1F8115710A7CF42A0E59E3FA37D723BEB42
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

25364

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

python311

PyDict_Size PyExc_AttributeError PyTuple_GetSlice PyUnicode_New PyUnicode_Split PyErr_SetString PyUnicode_InternInPlace PyDict_Next PyErr_Format PyDict_Type PyObject_RichCompare _Py_FalseStruct PyImport_GetModule PyModule_NewObject PyMethod_Type PyExc_OverflowError PyCode_NewWithPosOnlyArgs _Py_Dealloc PyTuple_GetItem PyImport_GetModuleDict PyModule_GetDict PyErr_ExceptionMatches PyUnicode_FindChar PyObject_GC_Del PyObject_CallFunctionObjArgs PyObject_GenericGetDict PyObject_ClearWeakRefs PyObject_Vectorcall PyUnicode_FromFormat Py_Version PyList_New PyImport_AddModule PyObject_GetAttrString PyErr_Clear PyDict_SetItemString PyDict_SetItem PyDict_New PyUnicode_Type _PyDict_GetItem_KnownHash PyMem_Free PyCMethod_New PyErr_NoMemory PyDict_GetItemString PyObject_GetItem PyObject_CallObject PyModuleDef_Init PyObject_GC_Track PyBytes_FromStringAndSize PyExc_TypeError PyType_FromModuleAndSpec PyMem_Realloc PyObject_IsTrue PyExc_NameError PyTuple_Pack _PyUnicode_Ready PyMem_Malloc Py_EnterRecursiveCall PyExc_ImportError _Py_TrueStruct PyMemoryView_FromMemory PyExc_SystemError _PyUnicode_FastCopyCharacters _PyObject_GC_New PyUnicode_FromString PyObject_Call PyType_Type PyUnicode_Substring PyUnicode_FromStringAndSize PyObject_GenericSetDict PySequence_Contains PyTuple_New _Py_NoneStruct PyObject_HasAttr PyModule_GetName PyObject_GetAttr PyInterpreterState_GetID PyDict_GetItemWithError PyUnicode_Concat PyObject_Hash PyObject_GC_UnTrack PyLong_FromLong PyObject_SetAttrString PyMethod_New PyExc_RuntimeError _PyThreadState_UncheckedGet PyTraceBack_Here PyObject_GenericGetAttr PyUnicode_DecodeUTF8 PyLong_FromSsize_t PyErr_Occurred PyImport_ImportModuleLevelObject PyBytes_AsString PyImport_ImportModule Py_LeaveRecursiveCall PyFrame_New PyExc_RuntimeWarning PyErr_WarnEx PyErr_GivenExceptionMatches PyCode_NewEmpty PyDict_SetDefault PyException_GetTraceback PyExc_Exception PyThreadState_Get PyOS_snprintf PyUnicode_InternFromString PyObject_SetAttr _PyObject_GenericGetAttrWithDict PyBaseObject_Type

kernel32

DisableThreadLibraryCalls RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent

vcruntime140

__C_specific_handler strrchr __std_type_info_destroy_list memset memcpy memcmp

api-ms-win-crt-runtime-l1-1-0

_initterm_e _seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _initterm _execute_onexit_table _cexit

Sharing

General

Malware Config

Signatures

File Explorer

45492e3e0910260fcc484a2cdb90bd6be0b21ac0ed04da3e50f94bc9de72b33f

python311

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

generic