Resubmissions

25-12-2023 00:09

231225-afkm7safa7 3

General

  • Target

    generator.rar

  • Size

    5.2MB

  • MD5

    ee834505400376026a639c39b52d72b9

  • SHA1

    8e19b998f9464f70ef2fe4597aaf4ce25150cb30

  • SHA256

    906115e099f99cb80ef571703ebb39ed243608a2174fda7e2dc252953631a69f

  • SHA512

    fe708173ed8eb67a1f8a58aaaa29723f802bac013f593e841c1e71a416823b4285dec41b6f32b732ff5925ad3c3738cce04581840fd17492cea1dac6c51da4e6

  • SSDEEP

    98304:q4J15BuzMJygvbGf1gzkfRFczmNMnB5b3fyM35Yg/SddQ7tXYmQLypS:qi1DH9gAkfz2fnB5bPr5Yg/Sdq5hqypS

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • generator.rar
    .rar
  • generator/generator.exe
    .exe windows:6 windows x86 arch:x86

    843b62a5fc208339221464410ed905e7


    Headers

    Imports

    Sections

  • generator/lib/_bz2.pyd
    .dll windows:6 windows x86 arch:x86

    aac7212376129ec3c2566dc0e505388b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • generator/lib/_hashlib.pyd
    .dll windows:6 windows x86 arch:x86

    65401824d8fe2389f2502ae37a818edb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • generator/lib/_lzma.pyd
    .dll windows:6 windows x86 arch:x86

    63bbfa3804520e6e86f905e1e78a6094


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • generator/lib/_queue.pyd
    .dll windows:6 windows x86 arch:x86

    53da9e1c1fe45af937eaae093c7f6367


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • generator/lib/_socket.pyd
    .dll .js windows:6 windows x86 arch:x86 polyglot

    12ca01b6d146f0b09c7a076d50053b27


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • generator/lib/_ssl.pyd
    .dll windows:6 windows x86 arch:x86

    33434e9db43b4e5d886d1344a8339027


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • generator/lib/certifi/__init__.pyc
  • generator/lib/certifi/cacert.pem
  • generator/lib/certifi/core.pyc
  • generator/lib/chardet/__init__.pyc
  • generator/lib/chardet/big5freq.pyc
  • generator/lib/chardet/big5prober.pyc
  • generator/lib/chardet/chardistribution.pyc
  • generator/lib/chardet/charsetgroupprober.pyc
  • generator/lib/chardet/charsetprober.pyc
  • generator/lib/chardet/codingstatemachine.pyc
  • generator/lib/chardet/compat.pyc
  • generator/lib/chardet/cp949prober.pyc
  • generator/lib/chardet/enums.pyc
  • generator/lib/chardet/escprober.pyc
  • generator/lib/chardet/escsm.pyc
  • generator/lib/chardet/eucjpprober.pyc
  • generator/lib/chardet/euckrfreq.pyc
  • generator/lib/chardet/euckrprober.pyc
  • generator/lib/chardet/euctwfreq.pyc
  • generator/lib/chardet/euctwprober.pyc
  • generator/lib/chardet/gb2312freq.pyc
  • generator/lib/chardet/gb2312prober.pyc
  • generator/lib/chardet/hebrewprober.pyc
  • generator/lib/chardet/jisfreq.pyc
  • generator/lib/chardet/jpcntx.pyc
  • generator/lib/chardet/langbulgarianmodel.pyc
  • generator/lib/chardet/langcyrillicmodel.pyc
  • generator/lib/chardet/langgreekmodel.pyc
  • generator/lib/chardet/langhebrewmodel.pyc
  • generator/lib/chardet/langthaimodel.pyc
  • generator/lib/chardet/langturkishmodel.pyc
  • generator/lib/chardet/latin1prober.pyc
  • generator/lib/chardet/mbcharsetprober.pyc
  • generator/lib/chardet/mbcsgroupprober.pyc
  • generator/lib/chardet/mbcssm.pyc
  • generator/lib/chardet/sbcharsetprober.pyc
  • generator/lib/chardet/sbcsgroupprober.pyc
  • generator/lib/chardet/sjisprober.pyc
  • generator/lib/chardet/universaldetector.pyc
  • generator/lib/chardet/utf8prober.pyc
  • generator/lib/chardet/version.pyc
  • generator/lib/collections/__init__.pyc
  • generator/lib/collections/abc.pyc
  • generator/lib/distutils/README
  • generator/lib/distutils/__init__.pyc
  • generator/lib/distutils/command/command_template
  • generator/lib/distutils/command/wininst-10.0-amd64.exe
    .exe windows:5 windows x64 arch:x64

    aa466c044f0d2d2f6270070fe1bddf7b


    Headers

    Imports

    Sections

  • generator/lib/distutils/command/wininst-10.0.exe
    .exe windows:5 windows x86 arch:x86

    8f2701ffdbdff91f3f18c5e5c24cf9f2


    Headers

    Imports

    Sections

  • generator/lib/distutils/command/wininst-14.0-amd64.exe
    .exe windows:6 windows x64 arch:x64

    4d7ee3dbe35baab5e33b9a84e9397818


    Headers

    Imports

    Sections

  • generator/lib/distutils/command/wininst-14.0.exe
    .exe windows:6 windows x86 arch:x86

    4a2bd785bc3baf187c17a5e22d660299


    Headers

    Imports

    Sections

  • generator/lib/distutils/command/wininst-6.0.exe
    .exe windows:4 windows x86 arch:x86

    89ad82854409b9dd81837c899d65f03e


    Headers

    Imports

    Sections

  • generator/lib/distutils/command/wininst-7.1.exe
    .exe windows:4 windows x86 arch:x86

    c13c1bdb7371583da62542f08c300c96


    Headers

    Imports

    Sections

  • generator/lib/distutils/command/wininst-8.0.exe
    .exe windows:4 windows x86 arch:x86

    a8070c6ad7600bbdd417216375913d93


    Headers

    Imports

    Sections

  • generator/lib/distutils/command/wininst-9.0-amd64.exe
    .exe windows:5 windows x64 arch:x64

    14cf8f87d7eefee36338756e049a016b


    Headers

    Imports

    Sections

  • generator/lib/distutils/command/wininst-9.0.exe
    .exe windows:5 windows x86 arch:x86

    173236997feb8d32761139de2a616e51


    Headers

    Imports

    Sections

  • generator/lib/distutils/log.pyc
  • generator/lib/distutils/tests/Setup.sample
  • generator/lib/distutils/tests/includetest.rst
  • generator/lib/email/__init__.pyc
  • generator/lib/email/_encoded_words.pyc
  • generator/lib/email/_header_value_parser.pyc
  • generator/lib/email/_parseaddr.pyc
  • generator/lib/email/_policybase.pyc
  • generator/lib/email/architecture.rst
  • generator/lib/email/base64mime.pyc
  • generator/lib/email/charset.pyc
  • generator/lib/email/contentmanager.pyc
  • generator/lib/email/encoders.pyc
  • generator/lib/email/errors.pyc
  • generator/lib/email/feedparser.pyc
  • generator/lib/email/generator.pyc
  • generator/lib/email/header.pyc
  • generator/lib/email/headerregistry.pyc
  • generator/lib/email/iterators.pyc
  • generator/lib/email/message.pyc
  • generator/lib/email/parser.pyc
  • generator/lib/email/policy.pyc
  • generator/lib/email/quoprimime.pyc
  • generator/lib/email/utils.pyc
  • generator/lib/encodings/__init__.pyc
  • generator/lib/encodings/aliases.pyc
  • generator/lib/encodings/ascii.pyc
  • generator/lib/encodings/base64_codec.pyc
  • generator/lib/encodings/big5.pyc
  • generator/lib/encodings/big5hkscs.pyc
  • generator/lib/encodings/bz2_codec.pyc
  • generator/lib/encodings/charmap.pyc
  • generator/lib/encodings/cp037.pyc
  • generator/lib/encodings/cp1006.pyc
  • generator/lib/encodings/cp1026.pyc
  • generator/lib/encodings/cp1125.pyc
  • generator/lib/encodings/cp1140.pyc
  • generator/lib/encodings/cp1250.pyc
  • generator/lib/encodings/cp1251.pyc
  • generator/lib/encodings/cp1252.pyc
  • generator/lib/encodings/cp1253.pyc
  • generator/lib/encodings/cp1254.pyc
  • generator/lib/encodings/cp1255.pyc
  • generator/lib/encodings/cp1256.pyc
  • generator/lib/encodings/cp1257.pyc
  • generator/lib/encodings/cp1258.pyc
  • generator/lib/encodings/cp273.pyc
  • generator/lib/encodings/cp424.pyc
  • generator/lib/encodings/cp437.pyc
  • generator/lib/encodings/cp500.pyc
  • generator/lib/encodings/cp65001.pyc
  • generator/lib/encodings/cp720.pyc
  • generator/lib/encodings/cp737.pyc
  • generator/lib/encodings/cp775.pyc
  • generator/lib/encodings/cp850.pyc
  • generator/lib/encodings/cp852.pyc
  • generator/lib/encodings/cp855.pyc
  • generator/lib/encodings/cp856.pyc
  • generator/lib/encodings/cp857.pyc
  • generator/lib/encodings/cp858.pyc
  • generator/lib/encodings/cp860.pyc
  • generator/lib/encodings/cp861.pyc
  • generator/lib/encodings/cp862.pyc
  • generator/lib/encodings/cp863.pyc
  • generator/lib/encodings/cp864.pyc
  • generator/lib/encodings/cp865.pyc
  • generator/lib/encodings/cp866.pyc
  • generator/lib/encodings/cp869.pyc
  • generator/lib/encodings/cp874.pyc
  • generator/lib/encodings/cp875.pyc
  • generator/lib/encodings/cp932.pyc
  • generator/lib/encodings/cp949.pyc
  • generator/lib/encodings/cp950.pyc
  • generator/lib/encodings/euc_jis_2004.pyc
  • generator/lib/encodings/euc_jisx0213.pyc
  • generator/lib/encodings/euc_jp.pyc
  • generator/lib/encodings/euc_kr.pyc
  • generator/lib/encodings/gb18030.pyc
  • generator/lib/encodings/gb2312.pyc
  • generator/lib/encodings/gbk.pyc
  • generator/lib/encodings/hex_codec.pyc
  • generator/lib/encodings/hp_roman8.pyc
  • generator/lib/encodings/hz.pyc
  • generator/lib/encodings/idna.pyc
  • generator/lib/encodings/iso2022_jp.pyc
  • generator/lib/encodings/iso2022_jp_1.pyc
  • generator/lib/encodings/iso2022_jp_2.pyc
  • generator/lib/encodings/iso2022_jp_2004.pyc
  • generator/lib/encodings/iso2022_jp_3.pyc
  • generator/lib/encodings/iso2022_jp_ext.pyc
  • generator/lib/encodings/iso2022_kr.pyc
  • generator/lib/encodings/iso8859_1.pyc
  • generator/lib/encodings/iso8859_10.pyc
  • generator/lib/encodings/iso8859_11.pyc
  • generator/lib/encodings/iso8859_13.pyc
  • generator/lib/encodings/iso8859_14.pyc
  • generator/lib/encodings/iso8859_15.pyc
  • generator/lib/encodings/iso8859_16.pyc
  • generator/lib/encodings/iso8859_2.pyc
  • generator/lib/encodings/iso8859_3.pyc
  • generator/lib/encodings/iso8859_4.pyc
  • generator/lib/encodings/iso8859_5.pyc
  • generator/lib/encodings/iso8859_6.pyc
  • generator/lib/encodings/iso8859_7.pyc
  • generator/lib/encodings/iso8859_8.pyc
  • generator/lib/encodings/iso8859_9.pyc
  • generator/lib/encodings/johab.pyc
  • generator/lib/encodings/koi8_r.pyc
  • generator/lib/encodings/koi8_t.pyc
  • generator/lib/encodings/koi8_u.pyc
  • generator/lib/encodings/kz1048.pyc
  • generator/lib/encodings/latin_1.pyc
  • generator/lib/encodings/mac_arabic.pyc
  • generator/lib/encodings/mac_centeuro.pyc
  • generator/lib/encodings/mac_croatian.pyc
  • generator/lib/encodings/mac_cyrillic.pyc
  • generator/lib/encodings/mac_farsi.pyc
  • generator/lib/encodings/mac_greek.pyc
  • generator/lib/encodings/mac_iceland.pyc
  • generator/lib/encodings/mac_latin2.pyc
  • generator/lib/encodings/mac_roman.pyc
  • generator/lib/encodings/mac_romanian.pyc
  • generator/lib/encodings/mac_turkish.pyc
  • generator/lib/encodings/mbcs.pyc
  • generator/lib/encodings/oem.pyc
  • generator/lib/encodings/palmos.pyc
  • generator/lib/encodings/ptcp154.pyc
  • generator/lib/encodings/punycode.pyc
  • generator/lib/encodings/quopri_codec.pyc
  • generator/lib/encodings/raw_unicode_escape.pyc
  • generator/lib/encodings/rot_13.pyc
  • generator/lib/encodings/shift_jis.pyc
  • generator/lib/encodings/shift_jis_2004.pyc
  • generator/lib/encodings/shift_jisx0213.pyc
  • generator/lib/encodings/tis_620.pyc
  • generator/lib/encodings/undefined.pyc
  • generator/lib/encodings/unicode_escape.pyc
  • generator/lib/encodings/unicode_internal.pyc
  • generator/lib/encodings/utf_16.pyc
  • generator/lib/encodings/utf_16_be.pyc
  • generator/lib/encodings/utf_16_le.pyc
  • generator/lib/encodings/utf_32.pyc
  • generator/lib/encodings/utf_32_be.pyc
  • generator/lib/encodings/utf_32_le.pyc
  • generator/lib/encodings/utf_7.pyc
  • generator/lib/encodings/utf_8.pyc
  • generator/lib/encodings/utf_8_sig.pyc
  • generator/lib/encodings/uu_codec.pyc
  • generator/lib/encodings/zlib_codec.pyc
  • generator/lib/html/__init__.pyc
  • generator/lib/html/entities.pyc
  • generator/lib/http/__init__.pyc
  • generator/lib/http/client.pyc
  • generator/lib/http/cookiejar.pyc
  • generator/lib/http/cookies.pyc
    .js
  • generator/lib/http/server.pyc
  • generator/lib/idna/__init__.pyc
  • generator/lib/idna/core.pyc
  • generator/lib/idna/idnadata.pyc
  • generator/lib/idna/intranges.pyc
  • generator/lib/idna/package_data.pyc
  • generator/lib/idna/uts46data.pyc
  • generator/lib/importlib/__init__.pyc
  • generator/lib/importlib/_bootstrap.pyc
  • generator/lib/importlib/_bootstrap_external.pyc
  • generator/lib/importlib/abc.pyc
  • generator/lib/importlib/machinery.pyc
  • generator/lib/importlib/util.pyc
  • generator/lib/json/__init__.pyc
  • generator/lib/json/decoder.pyc
  • generator/lib/json/encoder.pyc
  • generator/lib/json/scanner.pyc
  • generator/lib/libcrypto-1_1.dll
    .dll windows:6 windows x86 arch:x86

    993da743dc066af7c54afc4bb08b7e02


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • generator/lib/library.zip
    .zip
  • BUILD_CONSTANTS.pyc
  • Queue.pyc
  • __future__.pyc
  • __startup__.pyc
  • _bootlocale.pyc
  • _collections_abc.pyc
  • _compat_pickle.pyc
  • _compression.pyc
  • _dummy_thread.pyc
  • _osx_support.pyc
  • _py_abc.pyc
  • _strptime.pyc
  • _threading_local.pyc
  • _weakrefset.pyc
  • abc.pyc
  • argparse.pyc
  • ast.pyc
  • base64.pyc
  • bdb.pyc
  • bisect.pyc
  • bz2.pyc
  • calendar.pyc
  • cmd.pyc
  • code.pyc
  • codecs.pyc
  • codeop.pyc
  • contextlib.pyc
  • copy.pyc
  • copyreg.pyc
  • datetime.pyc
  • difflib.pyc
  • dis.pyc
  • doctest.pyc
  • dummy_threading.pyc
  • enum.pyc
  • fnmatch.pyc
  • ftplib.pyc
    .js
  • functools.pyc
  • genericpath.pyc
  • getopt.pyc
  • getpass.pyc
  • gettext.pyc
  • glob.pyc
  • grabber__init__.pyc
  • grabber__main__.pyc
  • gzip.pyc
  • hashlib.pyc
  • heapq.pyc
  • hmac.pyc
  • inspect.pyc
  • io.pyc
  • ipaddress.pyc
  • keyword.pyc
  • linecache.pyc
  • locale.pyc
  • lzma.pyc
  • mimetypes.pyc
  • netrc.pyc
  • ntpath.pyc
  • nturl2path.pyc
  • opcode.pyc
  • operator.pyc
  • optparse.pyc
  • os.pyc
  • pdb.pyc
  • pickle.pyc
  • pkgutil.pyc
  • platform.pyc
  • plistlib.pyc
  • posixpath.pyc
  • pprint.pyc
  • py_compile.pyc
  • pydoc.pyc
  • queue.pyc
  • quopri.pyc
  • random.pyc
  • re.pyc
  • reprlib.pyc
  • runpy.pyc
  • selectors.pyc
  • shlex.pyc
  • shutil.pyc
  • signal.pyc
  • socket.pyc
  • socketserver.pyc
  • sre_compile.pyc
  • sre_constants.pyc
  • sre_parse.pyc
  • ssl.pyc
  • stat.pyc
  • string.pyc
  • stringprep.pyc
  • struct.pyc
  • subprocess.pyc
  • sysconfig.pyc
  • tarfile.pyc
  • tempfile.pyc
  • textwrap.pyc
  • threading.pyc
  • token.pyc
  • tokenize.pyc
  • traceback.pyc
  • tracemalloc.pyc
  • tty.pyc
  • types.pyc
  • typing.pyc
  • uu.pyc
  • warnings.pyc
  • weakref.pyc
  • webbrowser.pyc
  • zipfile.pyc
  • generator/lib/libssl-1_1.dll
    .dll windows:6 windows x86 arch:x86

    770cd10463d5f5baf39998cfc29aea2a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • generator/lib/logging/__init__.pyc
  • generator/lib/pydoc_data/__init__.pyc
  • generator/lib/pydoc_data/_pydoc.css
  • generator/lib/pydoc_data/topics.pyc
  • generator/lib/pyexpat.pyd
    .dll windows:6 windows x86 arch:x86

    bab40f00b3844bed5928f207cbc04d5d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • generator/lib/requests/__init__.pyc
  • generator/lib/requests/__version__.pyc
  • generator/lib/requests/_internal_utils.pyc
  • generator/lib/requests/adapters.pyc
  • generator/lib/requests/api.pyc
  • generator/lib/requests/auth.pyc
  • generator/lib/requests/certs.pyc
  • generator/lib/requests/compat.pyc
  • generator/lib/requests/cookies.pyc
  • generator/lib/requests/exceptions.pyc
  • generator/lib/requests/hooks.pyc
  • generator/lib/requests/models.pyc
  • generator/lib/requests/packages.pyc
  • generator/lib/requests/sessions.pyc
  • generator/lib/requests/status_codes.pyc
  • generator/lib/requests/structures.pyc
  • generator/lib/requests/utils.pyc
  • generator/lib/select.pyd
    .dll windows:6 windows x86 arch:x86

    780f8f2eeb560f3661bd411c7b4b1c84


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • generator/lib/unicodedata.pyd
    .dll windows:6 windows x86 arch:x86

    4c5092055996ffebdaf591340fbb36cd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • generator/lib/unittest/__init__.pyc
  • generator/lib/unittest/case.pyc
  • generator/lib/unittest/loader.pyc
  • generator/lib/unittest/main.pyc
  • generator/lib/unittest/result.pyc
  • generator/lib/unittest/runner.pyc
  • generator/lib/unittest/signals.pyc
  • generator/lib/unittest/suite.pyc
  • generator/lib/unittest/util.pyc
  • generator/lib/urllib/__init__.pyc
  • generator/lib/urllib/error.pyc
  • generator/lib/urllib/parse.pyc
  • generator/lib/urllib/request.pyc
  • generator/lib/urllib/response.pyc
  • generator/lib/urllib3/__init__.pyc
  • generator/lib/urllib3/_collections.pyc
  • generator/lib/urllib3/connection.pyc
  • generator/lib/urllib3/connectionpool.pyc
  • generator/lib/urllib3/contrib/__init__.pyc
  • generator/lib/urllib3/contrib/_appengine_environ.pyc
  • generator/lib/urllib3/contrib/pyopenssl.pyc
    .js
  • generator/lib/urllib3/contrib/socks.pyc
  • generator/lib/urllib3/exceptions.pyc
  • generator/lib/urllib3/fields.pyc
  • generator/lib/urllib3/filepost.pyc
  • generator/lib/urllib3/packages/__init__.pyc
  • generator/lib/urllib3/packages/backports/__init__.pyc
  • generator/lib/urllib3/packages/backports/makefile.pyc
  • generator/lib/urllib3/packages/six.pyc
  • generator/lib/urllib3/packages/ssl_match_hostname/__init__.pyc
  • generator/lib/urllib3/packages/ssl_match_hostname/_implementation.pyc
  • generator/lib/urllib3/poolmanager.pyc
  • generator/lib/urllib3/request.pyc
  • generator/lib/urllib3/response.pyc
  • generator/lib/urllib3/util/__init__.pyc
  • generator/lib/urllib3/util/connection.pyc
  • generator/lib/urllib3/util/queue.pyc
  • generator/lib/urllib3/util/request.pyc
  • generator/lib/urllib3/util/response.pyc
  • generator/lib/urllib3/util/retry.pyc
  • generator/lib/urllib3/util/ssl_.pyc
  • generator/lib/urllib3/util/timeout.pyc
  • generator/lib/urllib3/util/url.pyc
  • generator/lib/urllib3/util/wait.pyc
  • generator/lib/xml/__init__.pyc
  • generator/lib/xml/parsers/__init__.pyc
  • generator/lib/xml/parsers/expat.pyc
  • generator/python37.dll
    .dll windows:6 windows x86 arch:x86

    ee5f7a2ae4f305dde2aefb30837ab931


    Code Sign

    Headers

    Imports

    Exports

    Sections