shell-scanner[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

shell-scanner.rar
Size

327KB
MD5

7b45e1aa4acb8bbcf07f250d5c401887
SHA1

7c5357ae51d18ae95f4c82ce0314dd64495f337c
SHA256

6a65323906d5b92d136a4d990b8e9b599f5a0c84d520ca84b910433f764c9106
SHA512

f5eb83b17b072cfd59be66c7b1fa64634295cd7da520159047a9d681d0df02b6e7f3793559d513562e1ba3cf143b551ce2a54aa114c06401c251b54f5ce89b6c
SSDEEP

6144:E89IIuPxq9/tl0MIGm1b0ZsybnhXmZyeTbPXZNzIJuo2mhAKeVJmt:E8Wy9Vl0Mlm1b0ZpT4ZyeTrY72mQVJI

Score

N/A

Malware Config

Signatures

Files

shell-scanner.rar
.rar
pytransform/__init__.py
pytransform/__init__.pyc
pytransform/_pytransform.dll
.dll windows x64

0f7a3d01e95a1b06e9ee00e9ffd63a4f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext

iphlpapi

GetAdaptersAddresses
GetNetworkParams

kernel32

CloseHandle
CreateFileA
CreateFileMappingA
DeleteCriticalSection
DeviceIoControl
EnterCriticalSection
FlushViewOfFile
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetLastError
GetModuleFileNameW
GetProcAddress
GetProcessHeap
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadContext
GetTickCount
GetVersion
GlobalAlloc
GlobalFree
HeapAlloc
HeapFree
InitializeCriticalSection
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryA
LocalFree
MapViewOfFile
MultiByteToWideChar
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetThreadContext
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualLock
VirtualProtect
VirtualQuery
VirtualUnlock

msvcrt

__iob_func
_access
_amsg_exit
_errno
_exit
_get_osfhandle
_initterm
_lock
_snprintf
_snwprintf
_stat64
_strdup
_time64
_unlock
_vsnprintf
_waccess
_wfopen
abort
atof
calloc
clock
exit
fclose
fopen
fprintf
fputc
fread
free
fseek
ftell
fwprintf
fwrite
getenv
isprint
isxdigit
malloc
memcmp
memcpy
memmove
memset
putc
qsort
raise
rand
realloc
signal
sprintf
srand
strchr
strcmp
strerror
strlen
strncmp
strncpy
strrchr
strstr
toupper
vfprintf
wcscpy

user32

MessageBoxW
wsprintfA

ws2_32

inet_ntoa

Exports

Exports

assert_armored
clean_obj
encode_capsule_key_file
encrypt_code_object
encrypt_files
encrypt_project_files
exec_file
generate_license_key
generate_project_license_files
get_error_msg
get_expired_days
get_hd_info
get_registration_code
import_module
init_module
init_runtime
set_option
show_hd_info
version_info

Sections

.text
Size: 599KB - Virtual size: 599KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 384KB - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 45KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 555B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
scanner.py
.py .sh linux

Sharing

General

Malware Config

Signatures

Files

0f7a3d01e95a1b06e9ee00e9ffd63a4f

Headers

File Characteristics

Imports

advapi32

iphlpapi

kernel32

msvcrt

user32

ws2_32

Exports

Exports

Sections

.text Size: 599KB - Virtual size: 599KB

.data Size: 384KB - Virtual size: 384KB

.rdata Size: 123KB - Virtual size: 123KB

.pdata Size: 10KB - Virtual size: 9KB

.xdata Size: 11KB - Virtual size: 11KB

.bss Size: - Virtual size: 45KB

.edata Size: 1024B - Virtual size: 555B

.idata Size: 4KB - Virtual size: 4KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 1024B - Virtual size: 688B

.text
Size: 599KB - Virtual size: 599KB

.data
Size: 384KB - Virtual size: 384KB

.rdata
Size: 123KB - Virtual size: 123KB

.pdata
Size: 10KB - Virtual size: 9KB

.xdata
Size: 11KB - Virtual size: 11KB

.bss
Size: - Virtual size: 45KB

.edata
Size: 1024B - Virtual size: 555B

.idata
Size: 4KB - Virtual size: 4KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 1024B - Virtual size: 688B