General

  • Target

    placebot_win64.zip

  • Size

    9.5MB

  • MD5

    3c5df7dd2029fb43a23ecd3af7ec38eb

  • SHA1

    ac415f079d3a4d62d2088984a422e2968b0f66fe

  • SHA256

    e106c6c519670a8090ab1fb7281ffb01428c453d5934f8334e50bdff4e11d212

  • SHA512

    c2d3421ef033b2cc8f2b8011e4ad40d00657a5e55ca121e3e7d92fb27c01461c00f148a909d247114766d5180b194b749c9fc34c3e90ffbd4d4a9b627439976a

  • SSDEEP

    196608:xL8P+JWPrQeFnLZ/ybgTjzWHybhIdEYONfO5N43yDA1goOvLAse:xxCrQeubaaSWdEFuNN5oOzAh

Score
3/10

Malware Config

Signatures

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • placebot_win64.zip
    .zip
  • placebot/PIL/MSVCP140.dll
    .dll windows x64

    2ba11fd5a511c8a409e705e9ab6b5dc1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • placebot/PIL/VCRUNTIME140_1.dll
    .dll windows x64

    ae0bde6314fa2027b54ce04898f6ab69


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • placebot/PIL/_imaging.cp310-win_amd64.pyd
    .dll windows x64

    868de4cce6829d5515f1ca0277948c41


    Headers

    Imports

    Exports

    Sections

  • placebot/PIL/_imagingtk.cp310-win_amd64.pyd
    .dll windows x64

    7d53c802d6ee5e35f9571c06ed47b9a3


    Headers

    Imports

    Exports

    Sections

  • placebot/PIL/_webp.cp310-win_amd64.pyd
    .dll windows x64

    b52c146e9cbb8e045a64d7034a27ed54


    Headers

    Imports

    Exports

    Sections

  • placebot/VCRUNTIME140.dll
    .dll windows x64

    7f07fd94e5bb907093556781cc464017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • placebot/_asyncio.pyd
    .dll windows x64

    33c2dc620ef3066802b73ad0196a03ca


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • placebot/_bz2.pyd
    .dll windows x64

    35a9dacf9f79c03b0381c7eb4ebf6710


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • placebot/_ctypes.pyd
    .dll windows x64

    ab77d51c0754f22e0927f48087728272


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • placebot/_decimal.pyd
    .dll windows x64

    8d495f7690547320cd4bc3d251892f87


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • placebot/_hashlib.pyd
    .dll windows x64

    dd99273b45baefe9626061e94ec53345


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • placebot/_lzma.pyd
    .dll windows x64

    ec321fe6f6ae9199bab3d28c705c7554


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • placebot/_multiprocessing.pyd
    .dll windows x64

    89f0000660ca367b2a00a5d0c2c2fc82


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • placebot/_overlapped.pyd
    .dll windows x64

    6ece61cb378bdb4f44d497ba91eec65f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • placebot/_queue.pyd
    .dll windows x64

    5d36e81fb0694d2f72e478d60df5edc0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • placebot/_socket.pyd
    .dll .js windows x64
  • placebot/_ssl.pyd
    .dll windows x64

    60a4bc7b5a2891d0543ceab618f6cfd2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • placebot/base_library.zip
    .zip
  • placebot/certifi/cacert.pem
  • placebot/config.json
  • placebot/image.png
    .png
  • placebot/libcrypto-1_1.dll
    .dll windows x64

    11f2ed72076bbf7871eb95fd5b4e84b0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • placebot/libffi-7.dll
    .dll windows x64

    3dc8b86d60f90a1851eee5f9dc191312


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • placebot/libssl-1_1.dll
    .dll windows x64

    8060a6a4706b6c76da720a52825df240


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • placebot/placebot.exe
    .exe windows x64

    ba5546933531fafa869b1f86a4e2a959


    Headers

    Imports

    Sections

  • placebot/pyexpat.pyd
    .dll windows x64

    d56a60a7d9f8ed3a6a815934929c63b8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • placebot/python310.dll
    .dll windows x64

    0d0725e28d76d10fe6e01bf87660074f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • placebot/select.pyd
    .dll windows x64

    812f037efaee65aa413caf6a2ec4d7c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • placebot/unicodedata.pyd
    .dll windows x64

    0c1227ef9e5248d56560b944d04025cb


    Code Sign

    Headers

    Imports

    Exports

    Sections