Malware-Database-main (1).zip
- SHA256 cd76a354a02015517a2b50d75aa3b68dd0e3164adbb040f6317251016bc62b21
Overview
overview
10Static
static
3Media-Play...89.exe
windows7-x64
3Media-Play...89.exe
windows10-2004-x64
5Empire of dicks.exe
windows7-x64
1Empire of dicks.exe
windows10-2004-x64
102903faf44...7b.exe
windows7-x64
1002903faf44...7b.exe
windows10-2004-x64
10073731fa5a...56.exe
windows7-x64
10073731fa5a...56.exe
windows10-2004-x64
10172c26f891...27.exe
windows7-x64
1172c26f891...27.exe
windows10-2004-x64
101b59b0fa61...12.ps1
windows7-x64
11b59b0fa61...12.ps1
windows10-2004-x64
11d801e2756...cf.exe
windows7-x64
71d801e2756...cf.exe
windows10-2004-x64
7Behavioral task
behavioral1
Sample
Media-Player_160889.exe
Resource
win7-20240221-en
windows7-x64
5 signatures
600 seconds
Behavioral task
behavioral2
Sample
Media-Player_160889.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
6 signatures
600 seconds
Behavioral task
behavioral3
Sample
Empire of dicks.exe
Resource
win7-20240221-en
windows7-x64
0 signatures
600 seconds
Behavioral task
behavioral4
Sample
Empire of dicks.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
0 signatures
600 seconds
Behavioral task
behavioral5
Sample
02903faf446ed43d79a8509e7743b41eab9605cfb48261bb2105176c3d4a877b.exe
Resource
win7-20240221-en
windows7-x64
3 signatures
600 seconds
Behavioral task
behavioral6
Sample
02903faf446ed43d79a8509e7743b41eab9605cfb48261bb2105176c3d4a877b.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
3 signatures
600 seconds
Behavioral task
behavioral7
Sample
073731fa5a5ef41b39784ec7db9846f1286d7000add6c0b5dd20357c81e23456.exe
Resource
win7-20240221-en
windows7-x64
4 signatures
600 seconds
Behavioral task
behavioral8
Sample
073731fa5a5ef41b39784ec7db9846f1286d7000add6c0b5dd20357c81e23456.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
5 signatures
600 seconds
Behavioral task
behavioral9
Sample
172c26f8914c92702cdbe134bf65280a1381a91e869f7eac0e62f7527.exe
Resource
win7-20240221-en
windows7-x64
0 signatures
600 seconds
Behavioral task
behavioral10
Sample
172c26f8914c92702cdbe134bf65280a1381a91e869f7eac0e62f7527.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
4 signatures
600 seconds
Behavioral task
behavioral11
Sample
1b59b0fa612e7c3d9ce272143058be6815b4ec563dfd7e1782657fe7c2f23812.ps1
Resource
win7-20240221-en
windows7-x64
2 signatures
600 seconds
Behavioral task
behavioral12
Sample
1b59b0fa612e7c3d9ce272143058be6815b4ec563dfd7e1782657fe7c2f23812.ps1
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
600 seconds
Behavioral task
behavioral13
Sample
1d801e2756c864d01cd456f68752a86c52981576839625759ae9e400f0d2a2cf.exe
Resource
win7-20240220-en
windows7-x64
5 signatures
600 seconds
Behavioral task
behavioral14
Sample
1d801e2756c864d01cd456f68752a86c52981576839625759ae9e400f0d2a2cf.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
4 signatures
600 seconds
General
- Target Malware-Database-main (1).zip
- Size 96.5MB
- Sample240320-2y4btadd85
- SHA256 cd76a354a02015517a2b50d75aa3b68dd0e3164adbb040f6317251016bc62b21
- MD5 51305dd56975d19b89383f89cd0c345d
- SHA1 c5f19481cefa5f79e04a289e451bdc20f3dc164c
- SHA512 cfd62d333665ca237668504a219a0b1a137ed1ddca18299feb371b53afcc0d681259865e0b643edb6f031b8cb9f036b41d82e60ec8359eb7e48a1887a4137b52
- SSDEEP 1572864:EUUx1ZUzfiNuLKno6PwohFZPKbtr3aLS6I2Mzv7c6uNhGQvbz6Km7xWf5l:EU+1KzQu+wsvP2t8JFwjc6ERPgW/
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Detects Pyinstaller 1 IoCs
resource yara_rule static1/unpack008/1d801e2756c864d01cd456f68752a86c52981576839625759ae9e400f0d2a2cf.exe pyinstaller - Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack003/Empire of dicks.exe unpack005/073731fa5a5ef41b39784ec7db9846f1286d7000add6c0b5dd20357c81e23456.exe unpack006/172c26f8914c92702cdbe134bf65280a1381a91e869f7eac0e62f7527.exe unpack008/1d801e2756c864d01cd456f68752a86c52981576839625759ae9e400f0d2a2cf.exe
File Explorer
-
Malware-Database-main (1).zip.zip 96.5MB
-
Malware-Database-main/Adware/Media-Player_160889.zip.zip 4.6MB
-
Media-Player_160889.exe.exe 9.2MB
-
Malware-Database-main/Bad Jokes/Empireofdicks.zip.zip 10.7MB
-
Empire of dicks.exe.exe 12.6MB
-
Malware-Database-main/Bad Jokes/README.MD137B
-
Malware-Database-main/Others/02903faf446ed43d79a8509e7743b41eab9605cfb48261bb2105176c3d4a877b.zip.zip 350KB
-
02903faf446ed43d79a8509e7743b41eab9605cfb48261bb2105176c3d4a877b.exe.exe 455KB
-
Malware-Database-main/Others/073731fa5a5ef41b39784ec7db9846f1286d7000add6c0b5dd20357c81e23456.zip.zip 940KB
-
073731fa5a5ef41b39784ec7db9846f1286d7000add6c0b5dd20357c81e23456.exe.exe 2.9MB
-
Malware-Database-main/Others/172c26f8914c92702cdbe134bf65280a1381a91e869f7eac0e62f7527.zip.zip 6.5MB
-
172c26f8914c92702cdbe134bf65280a1381a91e869f7eac0e62f7527.exe.exe 6.9MB
-
Malware-Database-main/Others/1b59b0fa612e7c3d9ce272143058be6815b4ec563dfd7e1782657fe7c2f23812.zip.zip 809B
-
1b59b0fa612e7c3d9ce272143058be6815b4ec563dfd7e1782657fe7c2f23812.exe.ps1 970B
-
Malware-Database-main/Others/1d801e2756c864d01cd456f68752a86c52981576839625759ae9e400f0d2a2cf.zip.zip 24.0MB
-
1d801e2756c864d01cd456f68752a86c52981576839625759ae9e400f0d2a2cf.exe.exe 24.4MB
-
main.pyc52KB
-
Malware-Database-main/Others/29756b65627cf2af64ed4398d51c2eafc2184b22489ea727358612779cb579a9.zip.zip 4.5MB
-
Malware-Database-main/Others/3ca5fe2c37452143403ea2ba7f348195e5458df33235afa3a43eb065150d77fc.zip.zip 10.6MB
-
Malware-Database-main/Others/96e3f394ea17a7ae098d53be6adf0aeb620aee68250f0a39013d9649c0b51e33.zip.zip 3.2MB
-
Malware-Database-main/Others/README.MD231B
-
Malware-Database-main/Others/a8f7dd1e23bc41679830460c057b46be6865bbf9a50d0a9d90329b175e447c03.zip.zip 2.4MB
-
Malware-Database-main/Others/cf0d6fa8a06e2be3c42889384d6dad29b5d3aa6e52bd96667e6e542b8a448b97.zip.zip 10.2MB
-
Malware-Database-main/Others/ebaa306de0dfa35998acc21567bf515c328935af8a78404f526cddfc85837c89.zip.zip 117KB
-
Malware-Database-main/Others/ebf8638b90bcca65e105dd7329ee516689bb5d6a9dc59a60139f88587c1ddac0.zip.zip 138KB
-
Malware-Database-main/README.md208B
-
Malware-Database-main/Trojans/GLManager.zip.zip 13.9MB
-
Malware-Database-main/Trojans/TLLauncherCracked-2024.zip.zip 4.5MB
Malware-Database-main/Adware/Media-Player_160889.zip
- SHA256 b43c5044e7d3937f51f1d7012ea2d04d32741572049fe0395bf2d5f2232560d3
- MD5 03b2a1e7e3c051c6f9ee91e7867862cf
- SHA1 90c0ec3df341d01662cb72748bf81c79c4b14a8a
- SHA512 4ac2b88dd3e85cebde6a95c201442c253be1d9743b8a3baa7eedbdcf6eb331c7aff86020d6f2565b2b6066703adeda10a0715d594b1019eaaa3dc30301c78259
- SSDEEP 98304:9p6UETqPQhKR7boEGl3r668ReAZC1pJTPuyWW7Ugqkz4VocPb2rAMKc:T6JAQhQbbGl3QeuaTGgqvKUaN
- MD5 SHA1 SHA512 SSDEEP
Password
infected
Media-Player_160889.exe
- IMPHASH 007862785f1768f33eed4b9c1db48fc4
- SHA256 fd50f25603c80e0b8a147e6a1abe099cd04b3c11b5ef8b32b232a466ec1d1815
- MD5 57ae7f3dcb2bbdf3702aa2145a15a84a
- SHA1 2467a184982fee815f369ce35d7a9a49b41f1739
- SHA512 9cb19919a22bd00507cecd2ec2d26608ea5bc6b3ad498d08a3074fefe53c3aae4a508275dfe0b45fe77598c6279939653bd615cfe922b06127785b69f2fa29a6
- SSDEEP 196608:vIQYIVpSDC2cZpQKehATj+d4XLqezaQwfwsFCflWpw5qJeQJ/UQfWY62LHb0vrpt:vrYIVpSDC2CpQKemTj+dhCDgJsv6tWKW
- MD5 SHA1 SHA512 SSDEEP
Digest
66:8f:82:35:3c:80:b9:ab:c8:71:e9:a5:a9:43:bc:85:29:d0:76:ea:8e:75:5d:25:e3:7f:87:6b:8b:98:5e:a3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=10sIT Oy,O=10sIT Oy,ST=Uusimaa,C=FI
Chains
Sep 30, 2022
CN=10sIT Oy,O=10sIT Oy,ST=Uusimaa,C=FI
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=10sIT Oy,O=10sIT Oy,ST=Uusimaa,C=FI
Serial Number
94:9b:b8:d4:dd:2e:4e:21:68:2a:13:02:9f:3a:98:38
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 10, 2022 - Feb 10, 2023
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US
Serial Number
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 21, 2022 - Nov 21, 2033
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
1
Major OS version
5
Entry point
6080404
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
gdi32
GetTextFaceW
GetRegionData
CreateRectRgn
SetTextColor
DeleteObject
SetWorldTransform
GetCharABCWidthsI
SetGraphicsMode
GetTextMetricsW
CreateCompatibleDC
CreateDIBSection
GetCharABCWidthsW
CreateBitmap
RemoveFontMemResourceEx
CreateFontIndirectW
GetStockObject
SelectObject
DeleteDC
GetCharABCWidthsFloatW
SetTextAlign
AddFontMemResourceEx
EnumFontFamiliesExW
GetObjectW
CreateDCW
OffsetRgn
GetDeviceCaps
SelectClipRgn
GetDIBits
GetTextExtentPoint32W
GetFontData
GdiFlush
SetBkMode
CreateCompatibleBitmap
GetOutlineTextMetricsW
ExtTextOutW
GetGlyphOutlineW
CombineRgn
RemoveFontResourceExW
AddFontResourceExW
BitBlt
oleaut32
SystemTimeToVariantTime
VariantChangeType
VariantInit
SysAllocStringLen
SysFreeString
SysStringLen
SysAllocString
imm32
ImmReleaseContext
ImmNotifyIME
ImmGetCompositionStringW
ImmSetCompositionWindow
ImmGetDefaultIMEWnd
ImmSetCandidateWindow
ImmGetContext
winmm
PlaySoundW
kernel32
SetFileAttributesW
GetUserDefaultLangID
MapViewOfFile
SetFilePointerEx
CopyFileW
FindFirstFileExW
WriteConsoleW
FormatMessageW
MultiByteToWideChar
GetDateFormatW
DuplicateHandle
SetThreadPriority
GetDateFormatA
SleepEx
OutputDebugStringA
GetFileType
PeekNamedPipe
CompareStringW
GetSystemTime
SystemTimeToTzSpecificLocalTime
GetStringTypeW
GetLocaleInfoW
GetThreadPriority
FreeEnvironmentStringsW
GetEnvironmentStringsW
lstrlenA
TerminateProcess
InterlockedIncrement
GetTimeFormatA
GetFileAttributesExW
WriteFile
Sleep
OpenProcess
TlsSetValue
FreeLibrary
GetDriveTypeW
GetCurrentDirectoryW
GetModuleFileNameA
GlobalUnlock
IsDebuggerPresent
GetModuleFileNameW
QueryPerformanceCounter
ReleaseMutex
UnhandledExceptionFilter
GetVersionExW
CheckRemoteDebuggerPresent
GetCPInfo
InitializeCriticalSectionAndSpinCount
IsValidLocale
lstrcmpW
GetACP
LoadLibraryW
GetModuleHandleA
GetLongPathNameW
GetUserGeoID
GlobalLock
DeleteFileA
CreateSemaphoreW
MoveFileExW
GetFileAttributesW
GetCommandLineW
SetErrorMode
HeapFree
DeleteCriticalSection
VirtualQuery
GetProcessHeap
GetCurrentThreadId
LeaveCriticalSection
IsValidLanguageGroup
EncodePointer
GetCurrentThread
InterlockedDecrement
FindClose
GetFileSize
SetHandleCount
TlsFree
SetEvent
FindNextFileW
GetModuleHandleW
HeapCreate
GetCurrentProcessId
DecodePointer
CreateThread
GetTempPathW
FindFirstFileW
GetSystemDirectoryW
FileTimeToLocalFileTime
GetCurrencyFormatW
GetGeoInfoW
RtlUnwind
SetLastError
GlobalSize
GetSystemInfo
FileTimeToSystemTime
EnumSystemLocalesA
GetTickCount64
CreateDirectoryW
GetFullPathNameW
RemoveDirectoryW
LCMapStringW
GetUserDefaultLCID
OpenFileMappingW
ExitProcess
GetConsoleCP
GetLogicalDrives
ExpandEnvironmentStringsW
WaitForSingleObject
LocalFree
SetEndOfFile
HeapAlloc
OutputDebugStringW
GetFileSizeEx
VirtualFree
GetProcAddress
SetEnvironmentVariableA
GetConsoleMode
GetStartupInfoW
DeleteFileW
IsValidCodePage
DeviceIoControl
WaitForMultipleObjects
IsProcessorFeaturePresent
GetTickCount
GetFileInformationByHandle
SetFilePointer
HeapReAlloc
QueryPerformanceFrequency
HeapSize
GetVolumeInformationW
CreateProcessW
GetCurrentProcess
GlobalAlloc
GetLastError
GetConsoleWindow
GetOEMCP
LoadLibraryA
SetUnhandledExceptionFilter
TlsAlloc
ExitThread
CreateFileA
VerSetConditionMask
GetUserDefaultUILanguage
EnterCriticalSection
CloseHandle
CreateFileW
ReleaseSemaphore
CreateMutexW
ResetEvent
CreateFileMappingW
WideCharToMultiByte
GetTimeFormatW
GetLocaleInfoA
ResumeThread
CreateEventW
GetSystemTimeAsFileTime
TerminateThread
GetCommandLineA
GetTimeZoneInformation
TlsGetValue
InterlockedExchange
GetLocalTime
FlushFileBuffers
GetEnvironmentVariableA
VerifyVersionInfoW
RaiseException
HeapSetInformation
ReadFile
SetStdHandle
GetStdHandle
UnmapViewOfFile
MoveFileW
InitializeCriticalSection
user32
TrackMouseEvent
InvalidateRect
CreateWindowExW
MessageBeep
GetWindowPlacement
SystemParametersInfoW
NotifyWinEvent
SetCursor
GetSysColor
GetWindowTextW
GetClassInfoW
ChangeClipboardChain
RegisterWindowMessageW
ScreenToClient
PeekMessageW
ReleaseDC
SetTimer
GetClipboardFormatNameW
EnumDisplayMonitors
GetUpdateRect
GetCursorInfo
DestroyIcon
IsIconic
GetKeyboardState
GetWindowLongW
PostMessageW
MoveWindow
SetWindowPos
SetClipboardViewer
GetDoubleClickTime
CharNextExA
GetFocus
GetSystemMenu
RegisterClassExW
SetWindowLongW
IsChild
GetCapture
GetAncestor
GetMonitorInfoW
GetSystemMetrics
EnumWindows
SetWindowsHookExW
SetCursorPos
GetParent
FlashWindowEx
ClientToScreen
ReleaseCapture
GetMenu
RealGetWindowClassW
CallNextHookEx
GetClientRect
IsWindowVisible
CreateIconIndirect
SetForegroundWindow
DestroyWindow
GetDC
EnableMenuItem
IsZoomed
MessageBoxW
SetFocus
CreateCursor
LoadImageW
GetForegroundWindow
GetIconInfo
EndPaint
DispatchMessageW
UnhookWindowsHookEx
SetWindowTextW
BeginPaint
AdjustWindowRectEx
GetSysColorBrush
TrackPopupMenuEx
HideCaret
GetAsyncKeyState
GetWindowRect
CreateCaret
TranslateMessage
MapVirtualKeyW
SetCaretPos
UnregisterClassW
GetQueueStatus
ToAscii
DrawIconEx
KillTimer
ToUnicode
SetMenuItemInfoW
LoadIconW
GetCursorPos
GetWindowThreadProcessId
SendMessageW
GetCaretBlinkTime
DestroyCursor
SetCapture
MsgWaitForMultipleObjectsEx
GetKeyState
GetKeyboardLayoutList
RegisterClassW
GetMessageExtraInfo
SetWindowRgn
ShowWindow
RegisterClipboardFormatW
SetParent
DestroyCaret
DefWindowProcW
ChildWindowFromPointEx
GetDesktopWindow
shell32
SHGetPathFromIDListW
SHGetFileInfoW
SHGetMalloc
SHBrowseForFolderW
SHGetSpecialFolderPathW
ShellExecuteW
ole32
OleFlushClipboard
CoTaskMemAlloc
DoDragDrop
ReleaseStgMedium
OleIsCurrentClipboard
CoLockObjectExternal
RegisterDragDrop
CoTaskMemFree
OleSetClipboard
CoGetMalloc
CoCreateGuid
OleInitialize
CoInitialize
CoUninitialize
RevokeDragDrop
OleUninitialize
CoCreateInstance
OleGetClipboard
advapi32
RegQueryValueExW
CryptAcquireContextW
RegEnumValueW
CryptGetHashParam
CryptEncrypt
GetLengthSid
RegQueryInfoKeyW
CryptReleaseContext
RegSetValueExW
RegOpenKeyExW
CryptDestroyKey
FreeSid
RegCreateKeyExW
CryptHashData
RegDeleteValueW
RegEnumKeyExW
RegCloseKey
CryptImportKey
CryptDestroyHash
CopySid
CryptGenRandom
GetTokenInformation
CryptCreateHash
RegDeleteKeyW
OpenProcessToken
RegFlushKey
ws2_32
htons
getsockopt
getpeername
socket
connect
WSASetLastError
WSAEnumNetworkEvents
bind
accept
listen
htonl
sendto
recvfrom
select
__WSAFDIsSet
ioctlsocket
gethostname
ntohs
getsockname
setsockopt
freeaddrinfo
recv
WSACloseEvent
WSAWaitForMultipleEvents
WSAResetEvent
WSAEventSelect
getaddrinfo
WSACreateEvent
WSAStartup
WSACleanup
WSAGetLastError
send
closesocket
WSAAsyncSelect
WSAIoctl
crypt32
CertCloseStore
CertFindCertificateInStore
CertAddCertificateContextToStore
CertCreateCertificateChainEngine
CryptDecodeObjectEx
CertOpenStore
CertFindExtension
CertFreeCertificateChain
CertGetCertificateChain
CertEnumCertificatesInStore
CryptStringToBinaryW
CertFreeCertificateChainEngine
CertFreeCertificateContext
PFXImportCertStore
CryptQueryObject
wldap32
ord117
ord216
ord73
ord301
ord167
ord79
ord142
ord46
ord27
ord127
ord147
ord133
ord26
ord208
ord145
ord219
ord14
ord41
z_adler32
z_adler32_combine
z_adler32_combine64
z_compress
z_compress2
z_compressBound
z_crc32
z_crc32_combine
z_crc32_combine64
z_deflate
z_deflateBound
z_deflateCopy
z_deflateEnd
z_deflateInit2_
z_deflateInit_
z_deflateParams
z_deflatePrime
z_deflateReset
z_deflateSetDictionary
z_deflateSetHeader
z_deflateTune
z_get_crc_table
z_inflate
z_inflateCopy
z_inflateEnd
z_inflateGetHeader
z_inflateInit2_
z_inflateInit_
z_inflateMark
z_inflatePrime
z_inflateReset
z_inflateReset2
z_inflateSetDictionary
z_inflateSync
z_inflateSyncPoint
z_inflateUndermine
z_uncompress
z_zError
z_zlibCompileFlags
z_zlibVersion
Name
.text
Size
6.3MB
Virtual Size
6.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2.5MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
54KB
Virtual Size
73KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
3B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.qtmetad
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
67KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
266KB
Virtual Size
265KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=205, version=65501,
count=451, id=1, productName=Unmarked objects,
count=13, id=203, version=65501,
count=64, id=206, version=65501,
count=18, id=207, version=65501,
count=1, id=202, version=65501,
count=36, id=211, version=65501,
count=1, id=126, version=50727,
count=1, id=201, version=65501,
count=1, id=204, version=65501,
Malware-Database-main/Bad Jokes/Empireofdicks.zip
- SHA256 451630fc6de56b6b13430788f049a1c4405f17ced30520f293eceb2a62c1b8a0
- MD5 e4510f08a2cea91ed881f17d1ec09487
- SHA1 d20ec84ffb9a8b01ffa1ad06c11bb351e0b6d6d0
- SHA512 babf5c12973d8858557d4917c796e8fbc222b7b271c642bebb51a2361678c62daa6507dbdb22c238d4c0e7f69206ed07447666acce9139ddd8e88f32e8915f1c
- SSDEEP 196608:1QLRwoVjQwhbmoczJeaLZ2+3LpWbCsstsDZRfn/KWMp5b:iRwoVjQIyRNjZ2iLUs6ZRfniWMpJ
- MD5 SHA1 SHA512 SSDEEP
Password
infected
Empire of dicks.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 657aa8705f6fe122e55048380304f8d593504f42556abf1f08aa4ab8be90c0f1
- MD5 2cacf6978bf86759896f7cf92802e355
- SHA1 fb14acec191284c52323f23c3ad69dfd3c6a7836
- SHA512 bb13a31382a16edbcac91b7c7df4c191e66ecb7d086f59160661bc598ebd4cf39cd8716af5ece95ab5511adf74fe817a5bf78826ba0020c2973f616f43c6acc8
- SSDEEP 393216:oLJ/lV0TkP3jQPjn+rKUEF5lxx2Xtj4SwVBplc:eliTejQL+YFAtj4SwVBplc
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12966658
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Dinaco\source\repos\Empire of dicks\Empire of dicks\obj\Release\Empire of dicks.pdb
mscoree
_CorExeMain
Name
.text
Size
12.4MB
Virtual Size
12.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
270KB
Virtual Size
269KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Malware-Database-main/Bad Jokes/README.MD
- SHA256 6eed54f4b5da41a11f8e81f52be260df01281b0758472fc01aad37f948e17b47
- MD5 cda8ddb311eb3a8f7cc9abfe017e7e69
- SHA1 4bd494b8b1f779b42b07800bb335b4da09360386
- SHA512 e7d38717f38e21191237c38342513ff7821cc844002efaae3f85d52c3f0b293679d53064dc2f4c7402666650b6d969fed2f0d424672eedb03bdb6b7edbfeff89
- MD5 SHA1 SHA512
Malware-Database-main/Others/02903faf446ed43d79a8509e7743b41eab9605cfb48261bb2105176c3d4a877b.zip
- SHA256 d407b8a7d94a6202248833bf907bfa7a0b00afb040499800014d9cfce17905ae
- MD5 d2106adb77f445ed37913232b408bfb3
- SHA1 d275b575f57c3a0c835df1c717e19f9320079be3
- SHA512 9c188ede2651d74004aa4f8fc8a749881d765339b8613e94c4639fcde79264722b7faee243ac885affee959600ae97bcf1e5cfe0204121fbf9261a30bde69109
- SSDEEP 6144:FbgImwJXkRX9ZVC9xrZsduoviZIUIM3XISElclr5HiiApJP9H1+vPoJ5:Fb5dMZVwxyduo6dIwXWWxtlAH9k4j
- MD5 SHA1 SHA512 SSDEEP
Password
infected
02903faf446ed43d79a8509e7743b41eab9605cfb48261bb2105176c3d4a877b.exe
- IMPHASH 1b58743aa6d3922ef077981e7514edd8
- SHA256 02903faf446ed43d79a8509e7743b41eab9605cfb48261bb2105176c3d4a877b
- MD5 ca4016d215c65d3c44fffa0c5ff31cbc
- SHA1 38df050b14a8566e4a57706e91884fa7826779e7
- SHA512 cf16707bc4f35f1ebe33691c20f116181f4714ed6417ead9b88f656e4fa1e848dc042e02a6b4a5c280b8bba516b3253a5cfd4a557c62ab14ec5d47b107f1ad52
- SSDEEP 12288:/GUT7l7g57eLmTgcH0GIsbU7i9f/jyarsT:/GUT7l7wamQGk7i9f/3rw
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
33:96:13:e4:88:3f:fc:19:f8:06:57:8b:72:28:52:0b:ee:58:cb:2f:41:df:84:09:f8:ef:87:dd:b1:7d:42:46
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 20, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cc:8e:b5:96:a6:bd:d1:c9:4e:00:00:00:00:02:cc
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 12, 2022 - May 11, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
27312
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
FreeConsole
InitializeCriticalSection
GetLocaleInfoA
GetModuleHandleA
HeapSize
GetProcAddress
GetCommandLineA
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
GetDlgItemTextA
SendMessageA
GetCursorPos
TrackPopupMenu
ClientToScreen
DestroyMenu
CreatePopupMenu
AppendMenuA
SendDlgItemMessageA
GetDlgItem
gdi32
GetObjectW
SetDCPenColor
Name
.text
Size
60KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
372KB
Virtual Size
375KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=28, id=132, productName=VS2008 build 21022, version=21022,
count=19, id=149, productName=VS2008 build 21022, version=21022,
count=85, id=131, productName=VS2008 build 21022, version=21022,
count=4, id=123, productName=VS2005 build 50727, version=50727,
count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=88, id=1, productName=Unmarked objects,
count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
Malware-Database-main/Others/073731fa5a5ef41b39784ec7db9846f1286d7000add6c0b5dd20357c81e23456.zip
- SHA256 5d1dacbd2858b0e3b5069e5a6236c596a656e2945aae120e90f319214ce010dd
- MD5 c6aa36d2b62e8ef2fa99ccc8e4d14987
- SHA1 dc810cfd4fd2667e8957f930cef20a2c85357979
- SHA512 2962bd352bcf427b00aa65e12f7bf2ca08a287afff30f964c2ff9c3cc657f980d015cb401fc5eef2d54007c0a81fc35f6f72f1ceac5f041c4afb5905deaf2f26
- SSDEEP 24576:WvMDeRKqMsL8babOr+VWxGRHsCAlRdyWRyQRn7:r4NbDWk5Mjdye7
- MD5 SHA1 SHA512 SSDEEP
Password
infected
073731fa5a5ef41b39784ec7db9846f1286d7000add6c0b5dd20357c81e23456.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 073731fa5a5ef41b39784ec7db9846f1286d7000add6c0b5dd20357c81e23456
- MD5 41b2380b454cfa680b4d2b30440e8109
- SHA1 f767fbbf9ddeb69c69d0cde4927957647e8a019d
- SHA512 a2600fd86158ef8481c18acf1a74c961058b4fbf1e9461294eb39475e634fbbcdea1f60b28cbc8669cd7be17f6406743834b137f44169c3a455f7551d7164421
- SSDEEP 12288:opUCj2KN8HnbttOCHfVNWDO2wF6edg0ASy0EPmLUd0btZcodN2BOjDyhC:opUCjobH9kDPww0QSyk0FhC
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2821742
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
2.7MB
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
176KB
Virtual Size
176KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Malware-Database-main/Others/172c26f8914c92702cdbe134bf65280a1381a91e869f7eac0e62f7527.zip
- SHA256 848e8fcab90a755983bf2080bae31fb2bab8132de9f552671268ec8bbfd1bd2c
- MD5 602f5a33279d462c295214042fd8c304
- SHA1 57ce90a645725de1007d4628f4bc302269b084ad
- SHA512 f02983c172ee194949d37b86129ab1e4bc7851e951046b8f6674f8619dd08ba4723af40254140250a5de7f86debbad757ac8058f68a6d518c669e070551aa388
- SSDEEP 196608:nrJd+/gLmGGrI0Hnz7Ycb2yoLXgIEwojUc/:nrJd+/gLmGGrvnnwrLXxML
- MD5 SHA1 SHA512 SSDEEP
Password
infected
172c26f8914c92702cdbe134bf65280a1381a91e869f7eac0e62f7527.exe
- IMPHASH 161839a78ef6f07a30d3f07895f6fe23
- SHA256 42acb43172c26f8914c92702cdbe134bf65280a1381a91e869f7eac0e62f7527
- MD5 c4e5fdf9d792f2ee3a27da184ff29a90
- SHA1 e2f3d78e9f24054fcf159dc39d3aa2d3d081c93a
- SHA512 a5a20115f90102ae36f8b4fea9dbad3be2139039ccd579f72d26213b9d3f2bc456d0ceca5dd5944d47ddee994f00276897e35ef24d64e92feb0d78f05600c635
- SSDEEP 196608:QD6v71WKiyOU3vWmgz/xEYx6F3isjr4kMn:QGz195eF/6YgFSO4z
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
5150808
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
lstrlenA
LocalAlloc
CheckRemoteDebuggerPresent
CreateFileW
GetProcAddress
LoadLibraryA
GetSystemTimeAsFileTime
GetModuleHandleA
CreateEventA
GetModuleFileNameW
TerminateProcess
GetCurrentProcess
CreateToolhelp32Snapshot
Thread32First
GetCurrentProcessId
GetCurrentThreadId
OpenThread
Thread32Next
CloseHandle
SuspendThread
ResumeThread
WriteProcessMemory
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
GetProcessAffinityMask
SetProcessAffinityMask
GetCurrentThread
SetThreadAffinityMask
Sleep
LoadLibraryA
FreeLibrary
GetTickCount
SystemTimeToFileTime
FileTimeToSystemTime
GlobalFree
LocalAlloc
LocalFree
GetProcAddress
ExitProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleW
LoadResource
MultiByteToWideChar
FindResourceExW
FindResourceExA
WideCharToMultiByte
GetThreadLocale
GetUserDefaultLCID
GetSystemDefaultLCID
EnumResourceNamesA
EnumResourceNamesW
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceTypesA
EnumResourceTypesW
CreateFileW
LoadLibraryW
GetLastError
FlushFileBuffers
WriteConsoleW
SetStdHandle
IsProcessorFeaturePresent
DecodePointer
GetCommandLineA
RaiseException
HeapFree
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
LCMapStringW
GetStringTypeW
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
HeapSize
WriteFile
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
HeapReAlloc
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
DestroyWindow
CharUpperBuffW
gdi32
GetObjectW
ole32
CoDecodeProxy
CoInitialize
Name
.text
Size
Virtual Size
94KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.`<-
Size
Virtual Size
4.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.GK'
Size
1024B
Virtual Size
896B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.LuF
Size
6.6MB
Virtual Size
6.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
306KB
Virtual Size
305KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Malware-Database-main/Others/1b59b0fa612e7c3d9ce272143058be6815b4ec563dfd7e1782657fe7c2f23812.zip
- SHA256 29328b8014f922ecf3e98151a0970ddb31052f2d79fd7fcff0b256a6ab49f4fe
- MD5 dd84b172478c179e4c687fc4d400b798
- SHA1 8fe3efa19196bd68805a9ac2de424250324a0f19
- SHA512 6ef9d4997030f3598b2d90b3bd22d2dde323198dbeec058825e22a64a8fe79f1d1c78f175f2b3816130d7812ba0362babb415da02d94ead19726661f834ecd7f
- MD5 SHA1 SHA512
Password
infected
1b59b0fa612e7c3d9ce272143058be6815b4ec563dfd7e1782657fe7c2f23812.exe
- SHA256 1b59b0fa612e7c3d9ce272143058be6815b4ec563dfd7e1782657fe7c2f23812
- MD5 d75fdffecc376b239ab9223d7bbf5be0
- SHA1 6141788629fc4edf6cbb0b8a89f41422df7dbaa3
- SHA512 03b1f81aa76227ad1a1a83ba8cad02dd2a7ddd941cda3bf01e74238fbc66e7c5216d12856f74c5b66df76458ceb10256b51d760e195274364d9baf971761d666
- MD5 SHA1 SHA512
Malware-Database-main/Others/1d801e2756c864d01cd456f68752a86c52981576839625759ae9e400f0d2a2cf.zip
- SHA256 abba506927b7dd0823d2d8e41518fc9a7f773c177bc34ca7bbfdd031f31a8bb9
- MD5 2c7b320f97af7704e7e71f34894d5647
- SHA1 14195c946f7a3569f0cc3b3b9c4ea1776e1037ea
- SHA512 3cecd1efa3fff6ef59be8e0be42beb0ff16418e07d2b7ca533ea93b2eb62f643087ea4f75e53d5bd1ff49421d284a5272090c83c1a611bef233505809443a69e
- SSDEEP 393216:f+TRGszPEhKSQrV8xhT7KnlVtGY3ejYoujfd2pAW9JaiT/6rV77E2gBUruMGiS74:2PckSoV8xaztFOV4PoJb6tY2gBUybiS8
- MD5 SHA1 SHA512 SSDEEP
Password
infected
1d801e2756c864d01cd456f68752a86c52981576839625759ae9e400f0d2a2cf.exe
- IMPHASH 0b5552dccd9d0a834cea55c0c8fc05be
- SHA256 1d801e2756c864d01cd456f68752a86c52981576839625759ae9e400f0d2a2cf
- MD5 fdd59dfdd103f79e4b2916e5f1e0f885
- SHA1 1a49240419811b8164236a0e2944b2f0cbb29936
- SHA512 e28c8629420d9b51463c4ae68d75551f0998b8019447748a2e63619ac4bffe373a7307d140555f241abdae37809683284655ba7a79dee596fc8b474a2d77a058
- SSDEEP 393216:32vf9QDD898p1TxNneyhOSBvF1LDddxXE3pQw6sVUDg6s9gUSkhVMhwS9Q1:Gvfz6h3hhOOF1l7ebSDgJ9+kC9Q1
- MD5 SHA1 SHA512 SSDEEP
-
Detects Pyinstaller
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
45840
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
CreateWindowExW
MessageBoxW
MessageBoxA
SystemParametersInfoW
DestroyIcon
SetWindowLongPtrW
GetWindowLongPtrW
GetClientRect
InvalidateRect
ReleaseDC
GetDC
DrawTextW
GetDialogBaseUnits
EndDialog
DialogBoxIndirectParamW
MoveWindow
SendMessageW
comctl32
ord380
kernel32
GetStringTypeW
GetFileAttributesExW
HeapReAlloc
FlushFileBuffers
GetCurrentDirectoryW
IsValidCodePage
GetACP
GetModuleHandleW
MulDiv
GetLastError
SetDllDirectoryW
GetModuleFileNameW
GetProcAddress
GetCommandLineW
GetEnvironmentVariableW
GetOEMCP
ExpandEnvironmentStringsW
CreateDirectoryW
GetTempPathW
WaitForSingleObject
Sleep
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
FreeLibrary
LoadLibraryExW
SetConsoleCtrlHandler
FindClose
FindFirstFileExW
CloseHandle
GetCurrentProcess
LocalFree
FormatMessageW
MultiByteToWideChar
WideCharToMultiByte
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetTimeZoneInformation
HeapSize
WriteConsoleW
SetEnvironmentVariableW
RtlUnwindEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
SetEndOfFile
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
RtlPcToFileHeader
GetCommandLineA
CreateFileW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFullPathNameW
RemoveDirectoryW
FindNextFileW
SetStdHandle
DeleteFileW
ReadFile
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
HeapFree
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
advapi32
OpenProcessToken
GetTokenInformation
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidW
gdi32
SelectObject
DeleteObject
CreateFontIndirectW
Name
.text
Size
162KB
Virtual Size
162KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
75KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
150KB
Virtual Size
150KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=259, version=30795,
count=191, id=261, version=30795,
count=10, id=260, version=30795,
count=4, id=253, version=31823,
count=40, id=261, version=31823,
count=17, id=260, version=31823,
count=9, id=259, version=31823,
count=11, id=257, version=30795,
count=139, id=1, productName=Unmarked objects,
count=20, id=260, version=31937,
count=1, id=258, version=31937,
main.pyc
- SHA256 9e4bc2066ff1009c5d99f648aa7781023080cf4b24a2c555167b4c5abfba7eb4
- MD5 e491c620c54323bb5c56b006a1ff1859
- SHA1 f39356231d4814a794eb5662803de78985d9e3a3
- SHA512 f07c4c27ad16e7e0032414407e470dc213d810ea11f216be08b08bd668631714d0e5c125c600c3bf2055eb602aa41bba5101a30e903f8402b1897201b72d8c55
- SSDEEP 1536:A5EBUSXifhws18bMnSD2mOT9vrNA5eiAHlI/+S3INGXHW:fBrkZjRI2
- MD5 SHA1 SHA512 SSDEEP
Malware-Database-main/Others/29756b65627cf2af64ed4398d51c2eafc2184b22489ea727358612779cb579a9.zip
- SHA256 946d9a358f29e0f2e220a82063b0ba08dce483a0aa3accf51128eb4e228f8eaa
- MD5 efc6480764dc812a408aeed33ba7dc43
- SHA1 01f3f93360bdf5cb610f211e46c3865ee33cca15
- SHA512 429ea9c5320fef7e40a58b2fb833965c0fc0429d6a8896eea1aea0e1ed197c21d2acff3f7a24e970f274d0073513225b01aafe77a5a899f96370b291ee995eb8
- SSDEEP 98304:Q2uGYm1sK9P8J1peepRbADEpV4MtyQft4mcdU6RHvvdS0ZA:5zEfz2EFtRau6vVhZA
- MD5 SHA1 SHA512 SSDEEP
Malware-Database-main/Others/3ca5fe2c37452143403ea2ba7f348195e5458df33235afa3a43eb065150d77fc.zip
- SHA256 ed6d12802f0f1098ea754b81f49e43cb8353c2c2332178cbc6fee5c054500c35
- MD5 932c425bbc506adf350e383e2d05e56b
- SHA1 f25bce63f0ff50e01d1e15f486ad2c242c5a414f
- SHA512 31973fefa73095250b46145f154aa33cecf15a20556630c5954387d1451182e316691b142de7de508c772de6fef32e5b507a7e18cf8d733395d95fb98a698cef
- SSDEEP 196608:84vQ57DgxwfCM20Z03MDZdt2SrB2mXV7keIlcvALieF17XIqSEA+RFZ:84vQ57qJMddw0RF/Iq4LN17YmA+RFZ
- MD5 SHA1 SHA512 SSDEEP
Malware-Database-main/Others/96e3f394ea17a7ae098d53be6adf0aeb620aee68250f0a39013d9649c0b51e33.zip
- SHA256 1cffc29676bc0a1e47ee1c4dd43f062d86fd2eb2c99b1909a5b9870134dcf7df
- MD5 8366e85c7f21e2c0f08f2ea428e02a71
- SHA1 0e9dd8e91b1037ba2890a1c0816c3dd3cf707b4a
- SHA512 4cd8284cd96c8759494f68be7a535ab95da5f566afff34cfdeb208752b637e91a97bd26a41cf92566a66e965a5e991ef44c69efb03a799dae76ac9369fdd04a0
- SSDEEP 98304:1i6xAqojV47hChGP1oJmw4flM2KYK7AeXYhchf:1iUAhuCwRRlzKYK7AmF
- MD5 SHA1 SHA512 SSDEEP
Malware-Database-main/Others/README.MD
- SHA256 05955de7988298c834b954eccce1777199696d122751096e41ea3dbec0393db8
- MD5 c93a8d1a76e8528289df6d5734756fd3
- SHA1 82638a234167ff8bbd8bf8f80683f2ed18c9ab0b
- SHA512 c1300c266ac15a1d627d9eb51b0d16ec4ab55dbfbfbd5cfebd569bf73e99d5c1d3bab261231f0d5b02166ad8b4f18f47e851a92ab1f244c37f0209606345e4a9
- MD5 SHA1 SHA512
Malware-Database-main/Others/a8f7dd1e23bc41679830460c057b46be6865bbf9a50d0a9d90329b175e447c03.zip
- SHA256 908f0b32c93bead645600458e0734d4daf913d907e690e9fecc5dcac18752b23
- MD5 7ecfc9249ab6694a4baff478ca5b0300
- SHA1 a00afe223ad193111e08b4793335861290630083
- SHA512 c9289c0e985af17d54b3ded7828ef78275bc3cd9b6fe51fe75e113b25282a9e05ec03bb9c4243ff2202c760afda522aa9f89c191c16612e1efef68bc7be2840e
- SSDEEP 49152:40oRpNIZzG9Vvpn8ZJIzOPuFTZrnSyzzsuCikV4BX/jo:408bIZzGWZJI6Puh5S6CiRBPs
- MD5 SHA1 SHA512 SSDEEP
Malware-Database-main/Others/cf0d6fa8a06e2be3c42889384d6dad29b5d3aa6e52bd96667e6e542b8a448b97.zip
- SHA256 88250aff49532215c41dbe6fb536428665eddf4646f35de4cd7dd63647ac04da
- MD5 02d044e8c7257f468bcff4aea9cae1c5
- SHA1 8b7334fc554b4ab23a569a502a43287b65e77f33
- SHA512 b5cf17702d57da9da874ee084d51a6d599a3e4676ee406c6888a5761e559d23d55956d51831ce85af87f286e59bcf8e241122a81e99a1129cc81540d1a7f65b0
- SSDEEP 196608:wnzuGMPO9vyEOlgdErYWbo8+Yce+Ah/uPkkGyDqqDwmWLdLvfqhE:YHqO5yEOmQYWbYFE/usk5XDFUbqhE
- MD5 SHA1 SHA512 SSDEEP
Malware-Database-main/Others/ebaa306de0dfa35998acc21567bf515c328935af8a78404f526cddfc85837c89.zip
- SHA256 1683675484b2001b2aa3921643d677feb748b0c7386b67e3362f3a54ab9cec9a
- MD5 febf3236ee4e5f411e0888ac367493cc
- SHA1 4e6c3fec81ddd746b7b08677d2c6181cc4b7d969
- SHA512 0977300ff1e492b7b29b1b7c0d1e493b750ba4e8c707f16692d50afef153b515391147f9ebf9fcd29ce66751f4ca0e218baca36e4278f5689b1bbfa63a5d2096
- SSDEEP 3072:p3MGA9Zv5xrm6fBgfdu/23QF30LXjmZdjekCl:lMH7BjfE3UELXj+lM
- MD5 SHA1 SHA512 SSDEEP
Malware-Database-main/Others/ebf8638b90bcca65e105dd7329ee516689bb5d6a9dc59a60139f88587c1ddac0.zip
- SHA256 838ba0d3d181b3d292816fb286bb45fc94e13649623a97840f70a63e0f26e42f
- MD5 49d1ffb94983d8e3c5590b036e7b29d2
- SHA1 6fb6cee3a31363fce713cf9adc9be4ea29d93a0c
- SHA512 dbe9a575e83f49ce358528dfa86ac777822e3a982e4962af2c0a1568eb2356cb10407014b3a95d545cf0d583a7740b2c6ad9f048b8ff2c73a76661d1ac3ea677
- SSDEEP 3072:3xX2cXHa3LUCMVn/gzg1gDwy2dpY7WvDdv97g/mW3C/+:bXHa3VWgzg1gE3YODt97g/mW3CG
- MD5 SHA1 SHA512 SSDEEP
Malware-Database-main/README.md
- SHA256 419c97976b7efc6b1d928224db18e6b5aae8ba336ea5472cf25b37d0517f6843
- MD5 f2c5750b3365b917ae37b1a540ef5ffe
- SHA1 7a2a2124b58540c21af6a50454dcb43694a99014
- SHA512 8c98e21b5404aff736cae83a5f51b4ca29c1a5305e1ce6cb7b1f93e18c7e10a316218da070b8010babd13ecf1a0773622d5b25ebb9e9b09b1f683de9fde01602
- MD5 SHA1 SHA512
Malware-Database-main/Trojans/GLManager.zip
- SHA256 f5b448e7e9ae6900b94940574cb45468614ffef75e331df7eb21c48be55a4e77
- MD5 4ac14b22ff4175f82b87ed746f2ee053
- SHA1 e7b64780d6c7a9f212ca845680e1b9c742d21315
- SHA512 9904a9e76f846562fa04aa77de267224d7d60b2738ee420e0c650dc4f2d36a245f01a1c107b84075fed580a2056c7f1d28f042100201bd9c6a03f9f0a3165387
- SSDEEP 196608:NOyLYPXCiFn+CSNQ6fzE5AEcXogo6DatmA70wRdK77g9GpQHlUy4KWmFl1BeDQY3:NOyIXvee846KmZVg9ECUyFBIQpz+J9
- MD5 SHA1 SHA512 SSDEEP
Malware-Database-main/Trojans/TLLauncherCracked-2024.zip
- SHA256 e3ad881428ac2b2840d5ecb728aa4a9ba4a0538548be41a62ee6954f525c1844
- MD5 c5c5549bed8021bd70a32ac2160091b2
- SHA1 e6173fe941498604b9b7cc8ff7a606818f81d645
- SHA512 f817de2964565e217c06f48abf2ef4efe6a5a03a61c57d5b4b614d996273d2ecfaf405f11fd2f225a4189f5e55a788433c33f0a47fb9731b6e0c0e08b1f632e0
- SSDEEP 98304:D6EYVQETFRro9gbvF7PZyLdBFCdJS/xTfgyByw/ugJPWLZwNDLHau2ULgeWPN:D9Y9TFRroGbvF7PZypBF8Y//0w7JPWLj
- MD5 SHA1 SHA512 SSDEEP