General

  • Target

    16x64_2211_1.zip

  • Size

    5.2MB

  • MD5

    23e931055af1e21bac331612ce6d5692

  • SHA1

    cd43d326ccf2e61965ed076e82f29ad1cd4f7a1b

  • SHA256

    ec36c606842fe38c4cb30ab9849e990daf23400756e6554c359eb331da0c3d69

  • SHA512

    5ac189b0954bd2ed5103c98288dc45375f782b7b2f903a7a74757f5c3d43f906d7141a1ae0e3218a49e64c4bcf9eabfd23374c15e307a0447d45c964b5fb09e0

  • SSDEEP

    98304:5ST3/dw6uyQmBlmqu2fkJoB//AkdwXkjG+GBY9UlCoEy6GBv4GS:5SzVwzzalrxALXkjGz+mlut

Score
3/10

Malware Config

Signatures

  • Unsigned PE 37 IoCs

    Checks for missing Authenticode signature.

Files

  • 16x64_2211_1.zip
    .zip
  • 16 Farmbot/mac.sh
    .sh linux
  • 16 Farmbot/modules.txt
  • 16 Farmbot/source/auth.pyd
    .dll windows:6 windows x64 arch:x64

    3fb47dceee9917cc1283bfac5ac4b0ee


    Headers

    Imports

    Exports

    Sections

  • 16 Farmbot/source/autoteam.pyd
    .dll windows:6 windows x64 arch:x64

    499cd500b144f2c83b2a2241d0c3e204


    Headers

    Imports

    Exports

    Sections

  • 16 Farmbot/source/bin/adx2wav/adx2wav.exe
    .exe windows:4 windows x86 arch:x86

    142ea292602d50d51b136bbc6b1e5de9


    Headers

    Imports

    Sections

  • 16 Farmbot/source/bin/adx2wav/adx2wavmod.c
  • 16 Farmbot/source/bin/awbtools/ADX2WAV.exe
    .exe windows:4 windows x86 arch:x86

    3a2918211df169ceb9fb7cc7fc85a56f


    Headers

    Imports

    Sections

  • 16 Farmbot/source/bin/awbtools/AWB_repacker.c
  • 16 Farmbot/source/bin/awbtools/AWB_repacker.exe
    .exe windows:4 windows x86 arch:x86

    054d943e0a33f312e6511d4d07a1f406


    Headers

    Imports

    Sections

  • 16 Farmbot/source/bin/awbtools/AWB_unpacker.c
  • 16 Farmbot/source/bin/awbtools/AWB_unpacker.exe
    .exe windows:4 windows x86 arch:x86

    eedc73109f6a200331a7f2eb777413e6


    Headers

    Imports

    Sections

  • 16 Farmbot/source/bin/awbtools/WAV2ADX.exe
    .exe windows:4 windows x86 arch:x86

    7baad8bb1c19389ae71915742b1b93fe


    Headers

    Imports

    Sections

  • 16 Farmbot/source/bin/degod/README
  • 16 Farmbot/source/bin/degod/brute.txt
  • 16 Farmbot/source/bin/degod/degod
  • 16 Farmbot/source/bin/degod/degod.c
  • 16 Farmbot/source/bin/degod/degod.exe
    .exe windows:4 windows x86 arch:x86

    9735149d5c17cd9de897a9b1294f1938


    Headers

    Imports

    Sections

  • 16 Farmbot/source/bin/degod/readme.txt
  • 16 Farmbot/source/bin/degod/xortest.c
  • 16 Farmbot/source/bin/degod/xortest.exe
    .exe windows:4 windows x86 arch:x86

    14c3449926e9eb5c14b9e4c0704f8ec8


    Headers

    Imports

    Sections

  • 16 Farmbot/source/bin/guessadx/Makefile
  • 16 Farmbot/source/bin/guessadx/guessadx.c
  • 16 Farmbot/source/bin/guessadx/guessadx.exe
    .exe windows:4 windows x86 arch:x86

    56ca60e5d7f45b89cb13de3d7d8e3c36


    Headers

    Imports

    Sections

  • 16 Farmbot/source/bin/guessadx/readme.txt
  • 16 Farmbot/source/bin/utftab/Makefile
  • 16 Farmbot/source/bin/utftab/Makefile.mingw
  • 16 Farmbot/source/bin/utftab/cpk_crypt.c
  • 16 Farmbot/source/bin/utftab/cpk_uncompress.c
  • 16 Farmbot/source/bin/utftab/cpk_uncompress.h
  • 16 Farmbot/source/bin/utftab/cpk_unpack.c
  • 16 Farmbot/source/bin/utftab/cpk_unpack.exe
    .exe windows:4 windows x86 arch:x86

    df99913a689da66f4b7ef3cbf49f12ab


    Headers

    Imports

    Sections

  • 16 Farmbot/source/bin/utftab/csb_extract.c
  • 16 Farmbot/source/bin/utftab/error_stuff.h
  • 16 Farmbot/source/bin/utftab/special_readme.txt
  • 16 Farmbot/source/bin/utftab/usm_deinterleave.c
  • 16 Farmbot/source/bin/utftab/usm_deinterleave.exe
    .exe windows:4 windows x86 arch:x86

    3e8b41566eeb2f19e0c8a48ca8aabb38


    Headers

    Imports

    Sections

  • 16 Farmbot/source/bin/utftab/utf_tab.c
  • 16 Farmbot/source/bin/utftab/utf_tab.h
  • 16 Farmbot/source/bin/utftab/utf_view.c
  • 16 Farmbot/source/bin/utftab/utf_view.exe
    .exe windows:4 windows x86 arch:x86

    8b050885f71d6bdd956c25861ba8a208


    Headers

    Imports

    Sections

  • 16 Farmbot/source/bin/utftab/util.c
  • 16 Farmbot/source/bin/utftab/util.h
  • 16 Farmbot/source/bot.py
  • 16 Farmbot/source/caches.pyd
    .dll windows:6 windows x64 arch:x64

    9503a500e9eb23ac9e57d5bb7dc989e1


    Headers

    Imports

    Exports

    Sections

  • 16 Farmbot/source/colors.pyd
    .dll windows:6 windows x64 arch:x64

    e08576f0f4485f1d46952c713e011cec


    Headers

    Imports

    Exports

    Sections

  • 16 Farmbot/source/commands.json
  • 16 Farmbot/source/commands.pyd
    .dll windows:6 windows x64 arch:x64

    320ba7e2945802cd2c90135d79fdc93e


    Headers

    Imports

    Exports

    Sections

  • 16 Farmbot/source/config.pyd
    .dll windows:6 windows x64 arch:x64

    8b37c3b9410f23c0510640a886252d79


    Headers

    Imports

    Exports

    Sections

  • 16 Farmbot/source/crypto.pyd
    .dll windows:6 windows x64 arch:x64

    976bced89f786a9a3f3cc865b72c1249


    Headers

    Imports

    Exports

    Sections

  • 16 Farmbot/source/database.pyd
    .dll windows:6 windows x64 arch:x64

    3a53fc5440790aeab809ca46eaf36139


    Headers

    Imports

    Exports

    Sections

  • 16 Farmbot/source/discord.pyd
    .dll windows:6 windows x64 arch:x64

    8dd3328ceec953c8a808a9c3cc776748


    Headers

    Imports

    Exports

    Sections

  • 16 Farmbot/source/drops219.db
  • 16 Farmbot/source/error.pyd
    .dll windows:6 windows x64 arch:x64

    f89675124da589a509d67f90acb7b28a


    Headers

    Imports

    Exports

    Sections

  • 16 Farmbot/source/errors.json
  • 16 Farmbot/source/facebook_link.pyd
    .dll windows:6 windows x64 arch:x64

    38fffe432a904e2ee7794663a9b117d5


    Headers

    Imports

    Exports

    Sections

  • 16 Farmbot/source/fapro.pyd
    .dll windows:6 windows x64 arch:x64

    c1416a8474623f3607a3b09aee98d904


    Headers

    Imports

    Exports

    Sections

  • 16 Farmbot/source/funcs.pyd
    .dll windows:6 windows x64 arch:x64

    17ed2a4756e1936be2736df6244acae2


    Headers

    Imports

    Exports

    Sections

  • 16 Farmbot/source/google_link.pyd
    .dll windows:6 windows x64 arch:x64

    783590938cacfcd5967f6f28c39a1b76


    Headers

    Imports

    Exports

    Sections

  • 16 Farmbot/source/gugelblay.pyd
    .dll windows:6 windows x64 arch:x64

    c94d78c8f17e0c86e958e9272229db18


    Headers

    Imports

    Exports

    Sections

  • 16 Farmbot/source/gugelblayservices.pyd
    .dll windows:6 windows x64 arch:x64

    468f81ee3635b98d732ca01bea3a5d77


    Headers

    Imports

    Exports

    Sections

  • 16 Farmbot/source/imgs/0.png
    .png
  • 16 Farmbot/source/imgs/1.png
    .png
  • 16 Farmbot/source/imgs/2.png
    .png
  • 16 Farmbot/source/imgs/3.png
    .png
  • 16 Farmbot/source/imgs/4.png
    .png
  • 16 Farmbot/source/imgs/5.png
    .png
  • 16 Farmbot/source/imgs/LR_incoming.png
    .png
  • 16 Farmbot/source/imgs/agl_n.png
    .png
  • 16 Farmbot/source/imgs/agl_r.png
    .png
  • 16 Farmbot/source/imgs/agl_sr.png
    .png
  • 16 Farmbot/source/imgs/agl_ssr.png
    .png
  • 16 Farmbot/source/imgs/field_border.png
    .png
  • 16 Farmbot/source/imgs/icon.png
  • 16 Farmbot/source/imgs/int_n.png
    .png
  • 16 Farmbot/source/imgs/int_r.png
    .png
  • 16 Farmbot/source/imgs/int_sr.png
    .png
  • 16 Farmbot/source/imgs/int_ssr.png
    .png
  • 16 Farmbot/source/imgs/item0.png
    .png
  • 16 Farmbot/source/imgs/item1.png
    .png
  • 16 Farmbot/source/imgs/item2.png
    .png
  • 16 Farmbot/source/imgs/item3.png
    .png
  • 16 Farmbot/source/imgs/medal0.png
    .png
  • 16 Farmbot/source/imgs/medal1.png
    .png
  • 16 Farmbot/source/imgs/medal2.png
    .png
  • 16 Farmbot/source/imgs/medal3.png
    .png
  • 16 Farmbot/source/imgs/phy_n.png
    .png
  • 16 Farmbot/source/imgs/phy_r.png
    .png
  • 16 Farmbot/source/imgs/phy_sr.png
    .png
  • 16 Farmbot/source/imgs/phy_ssr.png
    .png
  • 16 Farmbot/source/imgs/str_n.png
    .png
  • 16 Farmbot/source/imgs/str_r.png
    .png
  • 16 Farmbot/source/imgs/str_sr.png
    .png
  • 16 Farmbot/source/imgs/str_ssr.png
    .png
  • 16 Farmbot/source/imgs/teq_n.png
    .png
  • 16 Farmbot/source/imgs/teq_r.png
    .png
  • 16 Farmbot/source/imgs/teq_sr.png
    .png
  • 16 Farmbot/source/imgs/teq_ssr.png
    .png
  • 16 Farmbot/source/ingame.pyd
    .dll windows:6 windows x64 arch:x64

    56a0f660e63a23fc1fafab999321a926


    Headers

    Imports

    Exports

    Sections

  • 16 Farmbot/source/main.pyd
    .dll windows:6 windows x64 arch:x64

    07b249b8ebac78f33f2ea7cae0bc7652


    Headers

    Imports

    Exports

    Sections

  • 16 Farmbot/source/maps.pyd
    .dll windows:6 windows x64 arch:x64

    beece8d1966c868bb93c85a7be2e5178


    Headers

    Imports

    Exports

    Sections

  • 16 Farmbot/source/missions.pyd
    .dll windows:6 windows x64 arch:x64

    43e7b9bc82850826cf1001593cf72dc1


    Headers

    Imports

    Exports

    Sections

  • 16 Farmbot/source/outgame.pyd
    .dll windows:6 windows x64 arch:x64

    2c5e7a5342c6ab67ebd2a31dff480c3c


    Headers

    Imports

    Exports

    Sections

  • 16 Farmbot/source/potential.pyd
    .dll windows:6 windows x64 arch:x64

    1ecccd46f7519888fab0266909cc6d81


    Headers

    Imports

    Exports

    Sections

  • 16 Farmbot/source/public.pem
  • 16 Farmbot/source/rotations.pyd
    .dll windows:6 windows x64 arch:x64

    ec32e5ddc254d4b1ed7b852d081a216c


    Headers

    Imports

    Exports

    Sections

  • 16 Farmbot/source/t6_decryptor.pyd
    .dll windows:6 windows x64 arch:x64

    8c25876a4c951cfdce22e7c6d910c935


    Headers

    Imports

    Exports

    Sections

  • 16 Farmbot/source/texts.json
  • 16 Farmbot/source/transfer.pyd
    .dll windows:6 windows x64 arch:x64

    2c5e7a5342c6ab67ebd2a31dff480c3c


    Headers

    Imports

    Exports

    Sections

  • 16 Farmbot/source/userinterface.pyd
    .dll windows:6 windows x64 arch:x64

    8565ce9da484c8f3134d7f57e20639fe


    Headers

    Imports

    Exports

    Sections

  • 16 Farmbot/windows.bat