General

  • Target

    MAIN.zip

  • Size

    24.3MB

  • MD5

    7f141e2f453731cb2e5879bf5350628a

  • SHA1

    1ce71befd6cf6f4ff6a41bccbe4af4c9cfd8e2af

  • SHA256

    e0d5d64ab691d6467e98a7c8833b466af64d0b0bd80488cd65b4b80783db466d

  • SHA512

    05ad804898e2ccf7f94d0b690b460c98b98eb92377cacddd9441a8d33eaee7a15bdb8c8f402fadb4920f229249cb862d34b8d16bd14c9071e20988242fe4dbae

  • SSDEEP

    393216:8MZnLauW86ciD2uNShBAgihxQThN3+r8wDie0GybBTgC9S6Oya6+2:/ZL5iDDNTgCSI8o9y9z9uL4

Score
3/10

Malware Config

Signatures

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 66 IoCs

    Checks for missing Authenticode signature.

Files

  • MAIN.zip
    .zip
  • MAIN/Crypto/Cipher/_ARC4.pyd
    .dll windows x64

    200e5a8a397640442ee9fed8ad5a7ecb


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Cipher/_Salsa20.pyd
    .dll windows x64

    200e5a8a397640442ee9fed8ad5a7ecb


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Cipher/_chacha20.pyd
    .dll windows x64

    200e5a8a397640442ee9fed8ad5a7ecb


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Cipher/_pkcs1_decode.pyd
    .dll windows x64

    6df60195fdd7452f8a843a51882190b8


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Cipher/_raw_aes.pyd
    .dll windows x64

    200e5a8a397640442ee9fed8ad5a7ecb


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Cipher/_raw_aesni.pyd
    .dll windows x64

    bc234f2877830bc99ce39286541d6ef1


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Cipher/_raw_arc2.pyd
    .dll windows x64

    200e5a8a397640442ee9fed8ad5a7ecb


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Cipher/_raw_blowfish.pyd
    .dll windows x64

    200e5a8a397640442ee9fed8ad5a7ecb


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Cipher/_raw_cast.pyd
    .dll windows x64

    200e5a8a397640442ee9fed8ad5a7ecb


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Cipher/_raw_cbc.pyd
    .dll windows x64

    200e5a8a397640442ee9fed8ad5a7ecb


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Cipher/_raw_cfb.pyd
    .dll windows x64

    b7b86a79048044d07db6b7de63b7c90e


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Cipher/_raw_ctr.pyd
    .dll windows x64

    bc234f2877830bc99ce39286541d6ef1


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Cipher/_raw_des.pyd
    .dll windows x64

    1ec87bbeffbe3bb450c29176d904b690


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Cipher/_raw_des3.pyd
    .dll windows x64

    1ec87bbeffbe3bb450c29176d904b690


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Cipher/_raw_ecb.pyd
    .dll windows x64

    760d82578721a074ac240db77368fcb0


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Cipher/_raw_eksblowfish.pyd
    .dll windows x64

    200e5a8a397640442ee9fed8ad5a7ecb


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Cipher/_raw_ocb.pyd
    .dll windows x64

    2d71f25096805592caf0d27ca08982e5


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Cipher/_raw_ofb.pyd
    .dll windows x64

    200e5a8a397640442ee9fed8ad5a7ecb


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Hash/_BLAKE2b.pyd
    .dll windows x64

    200e5a8a397640442ee9fed8ad5a7ecb


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Hash/_BLAKE2s.pyd
    .dll windows x64

    200e5a8a397640442ee9fed8ad5a7ecb


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Hash/_MD2.pyd
    .dll windows x64

    2d71f25096805592caf0d27ca08982e5


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Hash/_MD4.pyd
    .dll windows x64

    2d71f25096805592caf0d27ca08982e5


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Hash/_MD5.pyd
    .dll windows x64

    2d71f25096805592caf0d27ca08982e5


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Hash/_RIPEMD160.pyd
    .dll windows x64

    200e5a8a397640442ee9fed8ad5a7ecb


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Hash/_SHA1.pyd
    .dll windows x64

    2d71f25096805592caf0d27ca08982e5


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Hash/_SHA224.pyd
    .dll windows x64

    2d71f25096805592caf0d27ca08982e5


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Hash/_SHA256.pyd
    .dll windows x64

    2d71f25096805592caf0d27ca08982e5


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Hash/_SHA384.pyd
    .dll windows x64

    2d71f25096805592caf0d27ca08982e5


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Hash/_SHA512.pyd
    .dll windows x64

    2d71f25096805592caf0d27ca08982e5


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Hash/_ghash_clmul.pyd
    .dll windows x64

    5ce92e7d1c0a7d3c28338120fb91aa68


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Hash/_ghash_portable.pyd
    .dll windows x64

    200e5a8a397640442ee9fed8ad5a7ecb


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Hash/_keccak.pyd
    .dll windows x64

    2d71f25096805592caf0d27ca08982e5


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Hash/_poly1305.pyd
    .dll windows x64

    2d71f25096805592caf0d27ca08982e5


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Math/_modexp.pyd
    .dll windows x64

    76fdee7f152f5f03a0f34aa1cf7a8c79


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Protocol/_scrypt.pyd
    .dll windows x64

    4ad07fe3afee3f621a47d59bc3c712f3


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/PublicKey/_ec_ws.pyd
    .dll windows x64

    cdd6995c30329a77a5295ae502a42975


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/PublicKey/_ed25519.pyd
    .dll windows x64

    f99664aebbac23e97e359e82f217470f


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/PublicKey/_ed448.pyd
    .dll windows x64

    5722a5dc6fe65dcd39d26c76976ce230


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/PublicKey/_x25519.pyd
    .dll windows x64

    bcca5f280737ee70d2e6d3cc1cfa5779


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Util/_cpuid_c.pyd
    .dll windows x64

    760d82578721a074ac240db77368fcb0


    Headers

    Imports

    Exports

    Sections

  • MAIN/Crypto/Util/_strxor.pyd
    .dll windows x64

    760d82578721a074ac240db77368fcb0


    Headers

    Imports

    Exports

    Sections

  • MAIN/MAIN.exe
    .exe windows x64

    0b5552dccd9d0a834cea55c0c8fc05be


    Headers

    Imports

    Sections

  • MAIN/PIL/_imaging.cp311-win_amd64.pyd
    .dll windows x64

    b1d49e639b2e983c3863295e8aac85e9


    Headers

    Imports

    Exports

    Sections

  • MAIN/PIL/_imagingcms.cp311-win_amd64.pyd
    .dll windows x64

    61baea01faddac6d7e8d245e5c66faed


    Headers

    Imports

    Exports

    Sections

  • MAIN/PIL/_imagingtk.cp311-win_amd64.pyd
    .dll windows x64

    efe13c42e00edcefbd97b0a277ab5098


    Headers

    Imports

    Exports

    Sections

  • MAIN/PIL/_webp.cp311-win_amd64.pyd
    .dll windows x64

    4cf2924e5ddaf44898c690ef3cfdd281


    Headers

    Imports

    Exports

    Sections

  • MAIN/VCRUNTIME140.dll
    .dll windows x64

    7f07fd94e5bb907093556781cc464017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MAIN/VCRUNTIME140_1.dll
    .dll windows x64

    f241ab269df0f49a166138f5cc16a017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MAIN/_asyncio.pyd
    .dll windows x64

    9d434eba59ce931bdee5b38eec4b196b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MAIN/_bz2.pyd
    .dll windows x64

    d0a62ab71a2b2ca69c6aba1f0a37fcdd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MAIN/_cffi_backend.cp311-win_amd64.pyd
    .dll windows x64

    7069f8173c59b8b09f02eb3c6701c761


    Headers

    Imports

    Exports

    Sections

  • MAIN/_ctypes.pyd
    .dll windows x64

    e716aa549ea6dfb7b233942c7f07ff87


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MAIN/_decimal.pyd
    .dll windows x64

    73c2b50451f272a440f47564c3cbd631


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MAIN/_elementtree.pyd
    .dll windows x64

    3581bde43d1dd1999267ea7f27542ab4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MAIN/_hashlib.pyd
    .dll windows x64

    b3b294bbb4a8941fd67b11ccbe0be65b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MAIN/_lzma.pyd
    .dll windows x64

    c39c7a021b2adfc11bb34f105f70355e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MAIN/_multiprocessing.pyd
    .dll windows x64

    ad5e2bc3f4742dadfaf9e74afc91a9f0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MAIN/_overlapped.pyd
    .dll windows x64

    48664681fdde7330197ca0b81cd0888e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MAIN/_queue.pyd
    .dll windows x64

    d39104d594ed5774205f94197c63bfbc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MAIN/_socket.pyd
    .dll .js windows x64
  • MAIN/_sqlite3.pyd
    .dll windows x64

    6c7847858d251cc23656628bf2649d1b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MAIN/_ssl.pyd
    .dll windows x64

    ba77dcd459076e05d402c6e9b4f52171


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MAIN/_uuid.pyd
    .dll windows x64

    368b62645c11988f8173cf8bdd0fea25


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MAIN/_win32sysloader.pyd
    .dll windows x64

    0cc37620e20a981eff1969afb8d54d95


    Headers

    Imports

    Exports

    Sections

  • MAIN/aiohttp/_helpers.cp311-win_amd64.pyd
    .dll windows x64

    67f66815894b822eac51b7b897c090bc


    Headers

    Imports

    Exports

    Sections

  • MAIN/aiohttp/_http_parser.cp311-win_amd64.pyd
    .dll windows x64

    54e2c730eded6bf4db09704a57c251af


    Headers

    Imports

    Exports

    Sections

  • MAIN/aiohttp/_http_writer.cp311-win_amd64.pyd
    .dll windows x64

    5a1c967a19dd7499f6965102e21bc27c


    Headers

    Imports

    Exports

    Sections

  • MAIN/aiohttp/_websocket.cp311-win_amd64.pyd
    .dll windows x64

    a01af2f36e74fc2980416c0cd208b48a


    Headers

    Imports

    Exports

    Sections

  • MAIN/attrs-23.1.0.dist-info/INSTALLER
  • MAIN/attrs-23.1.0.dist-info/METADATA
  • MAIN/attrs-23.1.0.dist-info/RECORD
  • MAIN/attrs-23.1.0.dist-info/WHEEL
  • MAIN/attrs-23.1.0.dist-info/licenses/LICENSE
  • MAIN/base_library.zip
    .zip
  • MAIN/certifi/cacert.pem
  • MAIN/charset_normalizer/md.cp311-win_amd64.pyd
    .dll windows x64

    f8c0f377107b03e523f21dcf227dcf24


    Headers

    Imports

    Exports

    Sections

  • MAIN/charset_normalizer/md__mypyc.cp311-win_amd64.pyd
    .dll windows x64

    b3733188209523b890064f784aca84fb


    Headers

    Imports

    Exports

    Sections

  • MAIN/cryptography-41.0.1.dist-info/INSTALLER
  • MAIN/cryptography-41.0.1.dist-info/LICENSE
  • MAIN/cryptography-41.0.1.dist-info/LICENSE.APACHE
  • MAIN/cryptography-41.0.1.dist-info/LICENSE.BSD
  • MAIN/cryptography-41.0.1.dist-info/METADATA
  • MAIN/cryptography-41.0.1.dist-info/RECORD
  • MAIN/cryptography-41.0.1.dist-info/WHEEL
  • MAIN/cryptography-41.0.1.dist-info/top_level.txt
  • MAIN/cryptography/hazmat/bindings/_rust.pyd
    .dll windows x64

    2439812f2c84fefe59f4b04e2799d51e


    Headers

    Imports

    Exports

    Sections

  • MAIN/frozenlist/_frozenlist.cp311-win_amd64.pyd
    .dll windows x64

    cfbbd88f4fc1e632b4cc3036adaba624


    Headers

    Imports

    Exports

    Sections

  • MAIN/libcrypto-1_1.dll
    .dll windows x64

    11f2ed72076bbf7871eb95fd5b4e84b0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MAIN/libffi-8.dll
    .dll windows x64

    3dc8b86d60f90a1851eee5f9dc191312


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MAIN/libssl-1_1.dll
    .dll windows x64

    3adf02a15243fccc51beb2b37fbf071d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MAIN/mfc140u.dll
    .dll windows x64

    7eedc677241d2accda18e4d0e39e2103


    Code Sign

    Headers

    Imports

    Sections

  • MAIN/multidict/_multidict.cp311-win_amd64.pyd
    .dll windows x64

    1f1d6572a871e8a013b796e8365b088c


    Headers

    Imports

    Exports

    Sections

  • MAIN/psutil/_psutil_windows.pyd
    .dll windows x64

    27329de4e2b5da8e5d3cef15fafebddf


    Headers

    Imports

    Exports

    Sections

  • MAIN/pyexpat.pyd
    .dll windows x64

    cfa32f0abc6ae85c4b2078212640c054


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MAIN/python3.dll
    .dll windows x64


    Code Sign

    Headers

    Exports

    Sections

  • MAIN/python311.dll
    .dll windows x64

    5714829f48aacde8f83e3e5f0ead1f49


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MAIN/pywin32_system32/pythoncom311.dll
    .dll windows x64

    1b264cd576a6b6117b47db03980bc455


    Headers

    Imports

    Exports

    Sections

  • MAIN/pywin32_system32/pywintypes311.dll
    .dll windows x64

    5b71a076f0c32bb52117188a36e3fec6


    Headers

    Imports

    Exports

    Sections

  • MAIN/select.pyd
    .dll windows x64

    fc4f7d736924aa67a1bd7b7b80894df9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MAIN/setuptools-65.5.0.dist-info/INSTALLER
  • MAIN/setuptools-65.5.0.dist-info/LICENSE
  • MAIN/setuptools-65.5.0.dist-info/METADATA
  • MAIN/setuptools-65.5.0.dist-info/RECORD
  • MAIN/setuptools-65.5.0.dist-info/WHEEL
  • MAIN/setuptools-65.5.0.dist-info/entry_points.txt
  • MAIN/setuptools-65.5.0.dist-info/top_level.txt
  • MAIN/sqlite3.dll
    .dll windows x64

    621d0184c311087c184bd1135e5b6c1c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MAIN/unicodedata.pyd
    .dll windows x64

    bb6f6d951dbdd290ecf382ca57459172


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MAIN/win32api.pyd
    .dll windows x64

    2000df8846b8f315bdc5cce6da06b275


    Headers

    Imports

    Exports

    Sections

  • MAIN/win32com/shell/shell.pyd
    .dll windows x64

    1556b6cd916a6c466a2e0fd0024c5ad6


    Headers

    Imports

    Exports

    Sections

  • MAIN/win32crypt.pyd
    .dll windows x64

    bffdfe175af4738a3359ba39fd0dfb52


    Headers

    Imports

    Exports

    Sections

  • MAIN/win32trace.pyd
    .dll windows x64

    202ab14a040ab62999188829d5316eac


    Headers

    Imports

    Exports

    Sections

  • MAIN/win32ui.pyd
    .dll windows x64

    e957d5741b939d53017aad8c14728bbe


    Headers

    Imports

    Exports

    Sections

  • MAIN/yarl/_quoting_c.cp311-win_amd64.pyd
    .dll windows x64

    c8aad050a232d2f0641684b8c4d0c78a


    Headers

    Imports

    Exports

    Sections