Switch_death_note[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

Switch_death_note.rar
Size

372KB
MD5

98f59fbcca4dea19eb309dc9d71f649e
SHA1

0a31861b918b9d287f224235fa9f997d77f18ccd
SHA256

3874f71b359e9a6a11268d489d4c7483252a0d5d906b29b9cc45ce22319ab9b0
SHA512

80b16c05197d5f5c5467a13b3a54a45d68f8bf434370aa4ee291be579d8bde048be35dfdd61fa366fb539840818077bf46cb2382de28288cf8af9d20bce89e69
SSDEEP

6144:ohgfs6t2LRYziLB7E1y//nMXWDyeHpBZqxWOpoRI9xk+0nFk4ZvgtbtZ1A9FE0Ll:ohg0PLG87EQPQWySFqwj6b0nmaetg9F3

Score

1^/10

Malware Config

Signatures

Files

Switch_death_note.rar
.rar
Switch death note/Death note.txt
Switch death note/data/config.json
Switch death note/data/usernames.txt
Switch death note/main.py
Switch death note/modules/__pycache__/solver.cpython-310.pyc
Switch death note/modules/__pycache__/solver.cpython-39.pyc
Switch death note/modules/__pycache__/ui.cpython-310.pyc
Switch death note/modules/__pycache__/ui.cpython-39.pyc
Switch death note/modules/__pycache__/utils.cpython-310.pyc
Switch death note/modules/__pycache__/utils.cpython-39.pyc
Switch death note/modules/solver.py
Switch death note/modules/ui.py
Switch death note/modules/utils.py
Switch death note/pytransform/__init__.py
Switch death note/pytransform/__pycache__/__init__.cpython-39.pyc
Switch death note/pytransform/_pytransform.dll
.dll windows x64

0f7a3d01e95a1b06e9ee00e9ffd63a4f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext

iphlpapi

GetAdaptersAddresses
GetNetworkParams

kernel32

CloseHandle
CreateFileA
CreateFileMappingA
DeleteCriticalSection
DeviceIoControl
EnterCriticalSection
FlushViewOfFile
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetLastError
GetModuleFileNameW
GetProcAddress
GetProcessHeap
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadContext
GetTickCount
GetVersion
GlobalAlloc
GlobalFree
HeapAlloc
HeapFree
InitializeCriticalSection
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryA
LocalFree
MapViewOfFile
MultiByteToWideChar
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetThreadContext
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualLock
VirtualProtect
VirtualQuery
VirtualUnlock

msvcrt

__iob_func
_access
_amsg_exit
_errno
_exit
_get_osfhandle
_initterm
_lock
_snprintf
_snwprintf
_stat64
_strdup
_time64
_unlock
_vsnprintf
_waccess
_wfopen
abort
atof
calloc
clock
exit
fclose
fopen
fprintf
fputc
fread
free
fseek
ftell
fwprintf
fwrite
getenv
isprint
isxdigit
malloc
memcmp
memcpy
memmove
memset
putc
qsort
raise
rand
realloc
signal
sprintf
srand
strchr
strcmp
strerror
strlen
strncmp
strncpy
strrchr
strstr
toupper
vfprintf
wcscpy

user32

MessageBoxW
wsprintfA

ws2_32

inet_ntoa

Exports

Exports

assert_armored
clean_obj
encode_capsule_key_file
encrypt_code_object
encrypt_files
encrypt_project_files
exec_file
generate_license_key
generate_project_license_files
get_error_msg
get_expired_days
get_hd_info
get_registration_code
import_module
init_module
init_runtime
set_option
show_hd_info
version_info

Sections

.text
Size: 600KB - Virtual size: 600KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 384KB - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 45KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 555B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Switch death note/start.bat

Sharing

General

Malware Config

Signatures

Files

0f7a3d01e95a1b06e9ee00e9ffd63a4f

Headers

File Characteristics

Imports

advapi32

iphlpapi

kernel32

msvcrt

user32

ws2_32

Exports

Exports

Sections

.text Size: 600KB - Virtual size: 600KB

.data Size: 384KB - Virtual size: 384KB

.rdata Size: 123KB - Virtual size: 123KB

.pdata Size: 10KB - Virtual size: 9KB

.xdata Size: 11KB - Virtual size: 11KB

.bss Size: - Virtual size: 45KB

.edata Size: 1024B - Virtual size: 555B

.idata Size: 4KB - Virtual size: 4KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 1024B - Virtual size: 688B

.text
Size: 600KB - Virtual size: 600KB

.data
Size: 384KB - Virtual size: 384KB

.rdata
Size: 123KB - Virtual size: 123KB

.pdata
Size: 10KB - Virtual size: 9KB

.xdata
Size: 11KB - Virtual size: 11KB

.bss
Size: - Virtual size: 45KB

.edata
Size: 1024B - Virtual size: 555B

.idata
Size: 4KB - Virtual size: 4KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 1024B - Virtual size: 688B