17ddfb6c6da41e72183b10ca12887c20832d9b11a9788529e31076f886c9921c

General

Target
17ddfb6c6da41e72183b10ca12887c20832d9b11a9788529e31076f886c9921c
Size 66KB
Sample260916-zb8a5sfm21
SHA256 17ddfb6c6da41e72183b10ca12887c20832d9b11a9788529e31076f886c9921c
MD5 b719222d8582f51849787e20519e6da9
SHA1 52095e7b87c3a91a9beaaaa905038df0c28ea09b
SHA512 dc6832fce438ed7bc3ff40f2905c3476f94ef37e6b9377f7500b3efff727ae31123e9b68e7f2fbdc6629a6535b59ed5a79ab09f5ba9d4f4a3b8a2c31b248c868
SSDEEP 1536:Qo3X6KaLqTsYEu7mCrgko5tvGBlKKCl4d:QoapYdLK5tvglKdl4
TLSH
T1B2633B0BA59644D5D9A64530CE3B9983FF70F4016720BBCF5314E6AA2F963F26EB5302
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17ddfb6c6da41e72183b10ca12887c20832d9b11a9788529e31076f886c9921c

File Explorer

17ddfb6c6da41e72183b10ca12887c20832d9b11a9788529e31076f886c9921c

.dll 66KB

17ddfb6c6da41e72183b10ca12887c20832d9b11a9788529e31076f886c9921c

IMPHASH b9cdf8f09c268c597fcf3a0208fe4a1f
SHA256 17ddfb6c6da41e72183b10ca12887c20832d9b11a9788529e31076f886c9921c
MD5 b719222d8582f51849787e20519e6da9
SHA1 52095e7b87c3a91a9beaaaa905038df0c28ea09b
SHA512 dc6832fce438ed7bc3ff40f2905c3476f94ef37e6b9377f7500b3efff727ae31123e9b68e7f2fbdc6629a6535b59ed5a79ab09f5ba9d4f4a3b8a2c31b248c868
SSDEEP 1536:Qo3X6KaLqTsYEu7mCrgko5tvGBlKKCl4d:QoapYdLK5tvglKdl4
TLSH
T1B2633B0BA59644D5D9A64530CE3B9983FF70F4016720BBCF5314E6AA2F963F26EB5302
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

47460

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

python314

PyInterpreterState_GetID PyObject_GetAttr PyModule_GetName PyList_Extend _Py_NoneStruct PyTuple_New PySequence_Contains PyObject_GenericSetDict PyObject_VisitManagedDict PyDict_SetItemString PyDict_Size PyDict_SetDefaultRef PyExc_AttributeError PyTuple_GetSlice PyUnicode_New PyErr_SetString PyObject_GetIter PyExc_ValueError PyUnicode_InternInPlace PyDict_Next PyErr_Format PyDict_Type PyThreadState_GetUnchecked PyTuple_Type _Py_FalseStruct PyImport_GetModule PyFloat_Type PyModule_NewObject PyMethod_Type PyLong_Type PyExc_OverflowError _Py_Dealloc PyTuple_GetItem PyImport_GetModuleDict PyModule_GetDict PyObject_Format PyErr_ExceptionMatches PyExc_UnicodeDecodeError PyObject_ClearManagedDict PyUnicode_FindChar PyObject_GC_Del PyObject_CallFunctionObjArgs PyObject_GenericGetDict PyObject_ClearWeakRefs PyObject_Vectorcall PyUnicode_FromFormat PySet_New PyList_New PySlice_New PyObject_GetAttrString PyErr_Clear PyList_Append PyObject_RichCompareBool PyException_SetTraceback PyObject_VectorcallDict PyDict_SetItem PyDict_New PyUnicode_Type _PyDict_GetItem_KnownHash PyObject_VectorcallMethod PyMem_Free PyExc_StopIteration PyObject_GetOptionalAttr PyUnstable_Object_IsUniquelyReferenced PyCMethod_New PyList_Type PyErr_NoMemory PyDict_GetItemString PyObject_GetItem PyModuleDef_Init PyObject_GC_Track PyBytes_FromStringAndSize PyUnstable_Code_NewWithPosOnlyArgs PyDict_GetItemRef PyExc_TypeError PyMem_Realloc PyType_FromMetaclass PyObject_IsTrue PyObject_Str PyExc_NameError PyTuple_Pack PyMem_Malloc Py_EnterRecursiveCall PyExc_ImportError _Py_TrueStruct PyMemoryView_FromMemory PyExc_SystemError _PyObject_GC_New PyNumber_TrueDivide PyUnicode_FromString _PyType_Lookup PyObject_Call PyType_Type PyUnicode_Substring PyUnicode_FromStringAndSize PyExc_UnboundLocalError PyUnicode_Concat PyObject_Hash PyObject_GC_UnTrack PyLong_FromLong PyObject_SetAttrString PyMethod_New PyExc_RuntimeError PyTraceBack_Here PyList_Sort PyUnicode_DecodeUTF8 PyArg_ValidateKeywordArguments PyErr_Occurred PyImport_ImportModuleLevelObject PyBytes_AsString PyImport_ImportModule PyImport_AddModuleRef Py_LeaveRecursiveCall PyExc_KeyError PyFrame_New PyExc_RuntimeWarning PyErr_WarnEx PyErr_GivenExceptionMatches PyObject_HasAttrWithError PyCode_NewEmpty PyDict_SetDefault PyErr_SetObject PyException_GetTraceback PyExc_Exception PyThreadState_Get PyOS_snprintf PyCFunction_Type PyUnicode_InternFromString PyObject_SetAttr PyBaseObject_Type PySequence_List Py_Version PyUnicode_CopyCharacters

kernel32

DisableThreadLibraryCalls RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent

vcruntime140

__C_specific_handler strrchr __std_type_info_destroy_list memset memcpy memcmp

api-ms-win-crt-runtime-l1-1-0

_initterm_e _seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _initterm _execute_onexit_table _cexit

Sharing

General

Malware Config

Signatures

File Explorer

17ddfb6c6da41e72183b10ca12887c20832d9b11a9788529e31076f886c9921c

python314

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

generic