General

  • Target

    workaim.rar

  • Size

    53.1MB

  • MD5

    dd19ed51740e309af3372784cd44383b

  • SHA1

    0c64a7e4c807e7119765df8c02d113243dfbe304

  • SHA256

    e6aa3b4efb7c2ed852cddee9f073eb0e7b77db61956ff16dac61f6f4539b1117

  • SHA512

    6217b99b80bd2cb5f396f1291bd902594a83e6459d24fb174c8fe8ba0d63c66855ff7358423adb7d078648f44181a36a87b7370767ac4f174e290a07bc6aa6cf

  • SSDEEP

    1572864:h2xGfzzRm7mPjvKeW6jTtHc/9LmrzqTmDCvE6HNfy:hqM3RwWvKE5c/FmKTmv6Vy

Score
3/10

Malware Config

Signatures

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 32 IoCs

    Checks for missing Authenticode signature.

Files

  • workaim.rar
    .rar

    Password: 123

  • workaim/_internal/PIL/_imaging.cp311-win_amd64.pyd
    .dll windows:6 windows x64 arch:x64

    Password: 123

    36a41f2e4337701774060b374f2b507b


    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/PIL/_imagingcms.cp311-win_amd64.pyd
    .dll windows:6 windows x64 arch:x64

    Password: 123

    61baea01faddac6d7e8d245e5c66faed


    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/PIL/_imagingtk.cp311-win_amd64.pyd
    .dll windows:6 windows x64 arch:x64

    Password: 123

    efe13c42e00edcefbd97b0a277ab5098


    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/PIL/_webp.cp311-win_amd64.pyd
    .dll windows:6 windows x64 arch:x64

    Password: 123

    4cf2924e5ddaf44898c690ef3cfdd281


    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/Pythonwin/mfc140u.dll
    .dll windows:6 windows x64 arch:x64

    Password: 123

    7eedc677241d2accda18e4d0e39e2103


    Code Sign

    Headers

    Imports

    Sections

  • workaim/_internal/Pythonwin/win32ui.pyd
    .dll windows:6 windows x64 arch:x64

    Password: 123

    e957d5741b939d53017aad8c14728bbe


    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/VCRUNTIME140.dll
    .dll windows:6 windows x64 arch:x64

    Password: 123

    7f07fd94e5bb907093556781cc464017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/VCRUNTIME140_1.dll
    .dll windows:6 windows x64 arch:x64

    Password: 123

    f241ab269df0f49a166138f5cc16a017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/_asyncio.pyd
    .dll windows:6 windows x64 arch:x64

    9d434eba59ce931bdee5b38eec4b196b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/_bz2.pyd
    .dll windows:6 windows x64 arch:x64

    d0a62ab71a2b2ca69c6aba1f0a37fcdd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/_cffi_backend.cp311-win_amd64.pyd
    .dll windows:6 windows x64 arch:x64

    1f8568e4a2373d2e7c1bf07e57b0e0f4


    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/_ctypes.pyd
    .dll windows:6 windows x64 arch:x64

    e716aa549ea6dfb7b233942c7f07ff87


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/_decimal.pyd
    .dll windows:6 windows x64 arch:x64

    c8876e9e8ae3bb7e4abb8348fe33f03e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/_hashlib.pyd
    .dll windows:6 windows x64 arch:x64

    02e7e9437b7e711286b4b21f873e174b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/_lzma.pyd
    .dll windows:6 windows x64 arch:x64

    c39c7a021b2adfc11bb34f105f70355e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/_multiprocessing.pyd
    .dll windows:6 windows x64 arch:x64

    ad5e2bc3f4742dadfaf9e74afc91a9f0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/_overlapped.pyd
    .dll windows:6 windows x64 arch:x64

    48664681fdde7330197ca0b81cd0888e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/_queue.pyd
    .dll windows:6 windows x64 arch:x64

    d39104d594ed5774205f94197c63bfbc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/_socket.pyd
    .dll .js windows:6 windows x64 arch:x64
  • workaim/_internal/_ssl.pyd
    .dll windows:6 windows x64 arch:x64

    320b5938e789045797776388b51c1253


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/audios/a
  • workaim/_internal/audios/fovdown.wav
  • workaim/_internal/audios/fovup.wav
  • workaim/_internal/audios/hold.wav
  • workaim/_internal/audios/toggle.wav
  • workaim/_internal/base_library.zip
    .zip
  • workaim/_internal/config.ini
  • workaim/_internal/cv2/__init__.py
  • workaim/_internal/cv2/config-3.py
  • workaim/_internal/cv2/config.py
  • workaim/_internal/cv2/cv2.pyd
    .dll windows:6 windows x64 arch:x64

    fdb60962d39032bef360837cc6049a9c


    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/cv2/data/__init__.py
  • workaim/_internal/cv2/gapi/__init__.py
  • workaim/_internal/cv2/load_config_py3.py
  • workaim/_internal/cv2/mat_wrapper/__init__.py
  • workaim/_internal/cv2/misc/__init__.py
  • workaim/_internal/cv2/misc/version.py
  • workaim/_internal/cv2/opencv_videoio_ffmpeg480_64.dll
    .dll windows:4 windows x64 arch:x64

    e4d00c955bbef72b9e6d22e33ed39ef2


    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/cv2/typing/__init__.py
  • workaim/_internal/cv2/utils/__init__.py
  • workaim/_internal/cv2/version.py
  • workaim/_internal/libcrypto-3.dll
    .dll windows:6 windows x64 arch:x64

    40bce6a23883072a66c68006f08e105c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/libffi-8.dll
    .dll windows:6 windows x64 arch:x64

    3dc8b86d60f90a1851eee5f9dc191312


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/libopenblas64__v0.3.23-246-g3d31191b-gcc_10_3_0.dll
    .dll windows:4 windows x64 arch:x64

    0192801a74ab651a7e6801eb031117e5


    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/libssl-3.dll
    .dll windows:6 windows x64 arch:x64

    1d40f408de60a3777846e639585fc0e8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/numpy/.libs/libopenblas64__v0.3.23-246-g3d31191b-gcc_10_3_0.dll
    .dll windows:4 windows x64 arch:x64

    0192801a74ab651a7e6801eb031117e5


    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/numpy/core/_multiarray_tests.cp311-win_amd64.pyd
    .dll windows:6 windows x64 arch:x64

    4c4107977b0247d82184ca07864d090d


    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/numpy/core/_multiarray_umath.cp311-win_amd64.pyd
    .dll windows:6 windows x64 arch:x64

    fcf8346decc6be363b088249180c3bfa


    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/numpy/fft/_pocketfft_internal.cp311-win_amd64.pyd
    .dll windows:6 windows x64 arch:x64

    bd93999460f3e9b5ee3baa22db4b8bdf


    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/numpy/linalg/_umath_linalg.cp311-win_amd64.pyd
    .dll windows:6 windows x64 arch:x64

    8648c234a0134e835f12e8c1064845ba


    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/numpy/linalg/lapack_lite.cp311-win_amd64.pyd
    .dll windows:6 windows x64 arch:x64

    860aad014eba632865fa716a18fb7c22


    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/numpy/random/_bounded_integers.cp311-win_amd64.pyd
    .dll windows:6 windows x64 arch:x64

    4a13aa357f3ab71db69ab91e12f5aa92


    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/numpy/random/_common.cp311-win_amd64.pyd
    .dll windows:6 windows x64 arch:x64

    f2ba3c6cddef4892395e47ae42a5df1e


    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/numpy/random/_generator.cp311-win_amd64.pyd
    .dll windows:6 windows x64 arch:x64

    013265dd867503d5be2084f813009c18


    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/numpy/random/_mt19937.cp311-win_amd64.pyd
    .dll windows:6 windows x64 arch:x64

    aac84adc22a680cd4b70940fe1b7fd6e


    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/numpy/random/_pcg64.cp311-win_amd64.pyd
    .dll windows:6 windows x64 arch:x64

    3290c796f9a75892948d1e4bb9e920d2


    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/numpy/random/_philox.cp311-win_amd64.pyd
    .dll windows:6 windows x64 arch:x64

    9a62f4671aea9d2353567290b559e98c


    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/numpy/random/_sfc64.cp311-win_amd64.pyd
    .dll windows:6 windows x64 arch:x64

    f8e20d44efc2993ef35d266cf2e5e442


    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/numpy/random/bit_generator.cp311-win_amd64.pyd
    .dll windows:6 windows x64 arch:x64

    3a7dbfb59cba6533bcb61697f99a4398


    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/numpy/random/mtrand.cp311-win_amd64.pyd
    .dll windows:6 windows x64 arch:x64

    4182ac617fb90a0991fad4cbb6b988fe


    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/pyexpat.pyd
    .dll windows:6 windows x64 arch:x64

    cfa32f0abc6ae85c4b2078212640c054


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/python3.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • workaim/_internal/python311.dll
    .dll windows:6 windows x64 arch:x64

    5714829f48aacde8f83e3e5f0ead1f49


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/pywin32_system32/pythoncom311.dll
    .dll windows:6 windows x64 arch:x64

    1b264cd576a6b6117b47db03980bc455


    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/pywin32_system32/pywintypes311.dll
    .dll windows:6 windows x64 arch:x64

    5b71a076f0c32bb52117188a36e3fec6


    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/select.pyd
    .dll windows:6 windows x64 arch:x64

    fc4f7d736924aa67a1bd7b7b80894df9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/setuptools-65.5.0.dist-info/INSTALLER
  • workaim/_internal/setuptools-65.5.0.dist-info/LICENSE
  • workaim/_internal/setuptools-65.5.0.dist-info/METADATA
  • workaim/_internal/setuptools-65.5.0.dist-info/RECORD
  • workaim/_internal/setuptools-65.5.0.dist-info/WHEEL
  • workaim/_internal/setuptools-65.5.0.dist-info/entry_points.txt
  • workaim/_internal/setuptools-65.5.0.dist-info/top_level.txt
  • workaim/_internal/unicodedata.pyd
    .dll windows:6 windows x64 arch:x64

    bb6f6d951dbdd290ecf382ca57459172


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/wheel-0.41.2.dist-info/INSTALLER
  • workaim/_internal/wheel-0.41.2.dist-info/LICENSE.txt
  • workaim/_internal/wheel-0.41.2.dist-info/METADATA
  • workaim/_internal/wheel-0.41.2.dist-info/RECORD
  • workaim/_internal/wheel-0.41.2.dist-info/WHEEL
  • workaim/_internal/wheel-0.41.2.dist-info/entry_points.txt
  • workaim/_internal/win32/_win32sysloader.pyd
    .dll windows:6 windows x64 arch:x64

    0cc37620e20a981eff1969afb8d54d95


    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/win32/win32api.pyd
    .dll windows:6 windows x64 arch:x64

    2000df8846b8f315bdc5cce6da06b275


    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/win32/win32pdh.pyd
    .dll windows:6 windows x64 arch:x64

    6ceb3196c621cf57f7e0165eeafd604e


    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/win32/win32trace.pyd
    .dll windows:6 windows x64 arch:x64

    202ab14a040ab62999188829d5316eac


    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/win32com/shell/shell.pyd
    .dll windows:6 windows x64 arch:x64

    1556b6cd916a6c466a2e0fd0024c5ad6


    Headers

    Imports

    Exports

    Sections

  • workaim/_internal/winsound.pyd
    .dll windows:6 windows x64 arch:x64

    83b9e9b45f7f8fe9fdaedf31c055ad13


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • workaim/workaim.exe
    .exe windows:5 windows x64 arch:x64

    380d2cbec5e800eecb6612f15b9ac012


    Headers

    Imports

    Sections