MerekV3[.]08_Lite[.]rar

Resubmissions

23-05-2024 01:46

240523-b7cmcahd57 3

23-05-2024 01:42

240523-b45hyshc65 3

Sharing

Copy URL

Twitter E-mail

General

Target

MerekV3.08_Lite.rar
Size

6.0MB
MD5

f2bd1f51b61709643431a7b76fe711d3
SHA1

6a2b399f69060f506b57e9086cd885f5a97e53b3
SHA256

98b52813707d4293c6150cd7e602240ad1ca266807c3c7225f2a3dbf6de7a13d
SHA512

473bd23c632b6153e670b0576e56d842eef2fac7efd2622c6205e478c41d34f525dc50b7ad7a7f6c62e131d6d45ece2f982bbb15291b3aff8262a0f95400396c
SSDEEP

98304:/1nBT6FapjeZ+FOT5YFUbnppHpMlr5QwlUPwR6KF8IlSezJZQIDb+3wrahHR/w4a:/1nBXqZ+MlsUbppH21lU4R6KFjxVZHz5

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/MerekV3.08 Lite/Merek Aimbot/lib/pyarmor_runtime_000000/pyarmor_runtime.pyd
unpack001/MerekV3.08 Lite/Merek Aimbot/pyarmor_runtime_000000/pyarmor_runtime.pyd

Files

MerekV3.08_Lite.rar
.rar
MerekV3.08 Lite/Merek Aimbot/README.md
MerekV3.08 Lite/Merek Aimbot/__pycache__/keyauth.cpython-310.pyc
MerekV3.08 Lite/Merek Aimbot/install_requirements.bat
MerekV3.08 Lite/Merek Aimbot/lib/__pycache__/aimbot.cpython-310.pyc
MerekV3.08 Lite/Merek Aimbot/lib/aimbot.py
MerekV3.08 Lite/Merek Aimbot/lib/best.pt
.zip
best/.data/serialization_id
best/byteorder
best/data.pkl
best/data/0
best/data/1
best/data/10
best/data/100
best/data/101
best/data/102
best/data/103
best/data/104
best/data/105
best/data/106
best/data/107
best/data/108
best/data/109
best/data/11
best/data/110
best/data/111
best/data/112
best/data/113
best/data/114
best/data/115
best/data/116
best/data/117
best/data/118
best/data/119
best/data/12
best/data/120
best/data/121
best/data/122
best/data/123
best/data/124
best/data/125
best/data/126
best/data/127
best/data/128
best/data/129
best/data/13
best/data/130
best/data/131
best/data/132
best/data/133
best/data/134
best/data/135
best/data/136
best/data/137
best/data/138
best/data/139
best/data/14
best/data/140
best/data/141
best/data/142
best/data/143
best/data/144
best/data/145
best/data/146
best/data/147
best/data/148
best/data/149
best/data/15
best/data/150
best/data/151
best/data/152
best/data/153
best/data/154
best/data/155
best/data/156
best/data/157
best/data/158
best/data/159
best/data/16
best/data/160
best/data/161
best/data/162
best/data/163
best/data/164
best/data/165
best/data/166
best/data/167
best/data/168
best/data/169
best/data/17
best/data/170
best/data/171
best/data/172
best/data/173
best/data/174
best/data/175
best/data/176
best/data/177
best/data/178
best/data/179
best/data/18
best/data/180
best/data/181
best/data/182
best/data/183
best/data/184
best/data/185
best/data/186
best/data/187
best/data/188
best/data/189
best/data/19
best/data/190
best/data/191
best/data/192
best/data/193
best/data/194
best/data/195
best/data/196
best/data/197
best/data/198
best/data/199
best/data/2
best/data/20
best/data/200
best/data/201
best/data/202
best/data/203
best/data/204
best/data/205
best/data/206
best/data/207
best/data/208
best/data/209
best/data/21
best/data/210
best/data/211
best/data/212
best/data/213
best/data/214
best/data/215
best/data/216
best/data/217
best/data/218
best/data/219
best/data/22
best/data/220
best/data/221
best/data/222
best/data/223
best/data/224
best/data/225
best/data/226
best/data/227
best/data/228
best/data/229
best/data/23
best/data/230
best/data/231
best/data/232
best/data/233
best/data/234
best/data/235
best/data/236
best/data/237
best/data/238
best/data/239
best/data/24
best/data/240
best/data/241
best/data/242
best/data/243
best/data/244
best/data/245
best/data/246
best/data/247
best/data/248
best/data/249
best/data/25
best/data/250
best/data/251
best/data/252
best/data/253
best/data/254
best/data/255
best/data/256
best/data/257
best/data/258
best/data/259
best/data/26
best/data/260
best/data/261
best/data/262
best/data/263
best/data/264
best/data/265
best/data/266
best/data/267
best/data/268
best/data/269
best/data/27
best/data/270
best/data/271
best/data/272
best/data/273
best/data/274
best/data/275
best/data/276
best/data/277
best/data/278
best/data/279
best/data/28
best/data/280
best/data/281
best/data/282
best/data/283
best/data/284
best/data/285
best/data/286
best/data/287
best/data/288
best/data/289
best/data/29
best/data/290
best/data/291
best/data/292
best/data/293
best/data/294
best/data/295
best/data/296
best/data/297
best/data/298
best/data/299
best/data/3
best/data/30
best/data/300
best/data/301
best/data/302
best/data/303
best/data/304
best/data/305
best/data/306
best/data/307
best/data/308
best/data/309
best/data/31
best/data/310
best/data/311
best/data/312
best/data/313
best/data/314
best/data/315
best/data/316
best/data/317
best/data/318
best/data/319
best/data/32
best/data/320
best/data/321
best/data/322
best/data/323
best/data/324
best/data/325
best/data/326
best/data/327
best/data/328
best/data/329
best/data/33
best/data/330
best/data/331
best/data/332
best/data/333
best/data/334
best/data/335
best/data/336
best/data/337
best/data/338
best/data/339
best/data/34
best/data/340
best/data/341
best/data/342
best/data/343
best/data/344
best/data/345
best/data/346
best/data/347
best/data/348
best/data/349
best/data/35
best/data/350
best/data/351
best/data/352
best/data/353
best/data/354
best/data/355
best/data/356
best/data/357
best/data/358
best/data/359
best/data/36
best/data/360
best/data/361
best/data/362
best/data/363
best/data/364
best/data/365
best/data/366
best/data/367
best/data/368
best/data/369
best/data/37
best/data/370
best/data/371
best/data/372
best/data/373
best/data/374
best/data/375
best/data/376
best/data/377
best/data/378
best/data/379
best/data/38
best/data/380
best/data/381
best/data/382
best/data/383
best/data/384
best/data/385
best/data/386
best/data/387
best/data/388
best/data/389
best/data/39
best/data/390
best/data/391
best/data/392
best/data/393
best/data/394
best/data/395
best/data/396
best/data/397
best/data/398
best/data/399
best/data/4
best/data/40
best/data/400
best/data/401
best/data/402
best/data/403
best/data/404
best/data/405
best/data/406
best/data/407
best/data/408
best/data/409
best/data/41
best/data/410
best/data/411
best/data/412
best/data/413
best/data/414
best/data/415
best/data/416
best/data/417
best/data/418
best/data/419
best/data/42
best/data/420
best/data/421
best/data/422
best/data/423
best/data/424
best/data/425
best/data/426
best/data/427
best/data/428
best/data/429
best/data/43
best/data/430
best/data/431
best/data/432
best/data/433
best/data/434
best/data/435
best/data/436
best/data/437
best/data/438
best/data/439
best/data/44
best/data/440
best/data/441
best/data/442
best/data/443
best/data/444
best/data/445
best/data/446
best/data/447
best/data/448
best/data/449
best/data/45
best/data/450
best/data/451
best/data/452
best/data/453
best/data/454
best/data/455
best/data/456
best/data/457
best/data/458
best/data/459
best/data/46
best/data/460
best/data/461
best/data/462
best/data/463
best/data/464
best/data/465
best/data/466
best/data/467
best/data/468
best/data/469
best/data/47
best/data/48
best/data/49
best/data/5
best/data/50
best/data/51
best/data/52
best/data/53
best/data/54
best/data/55
best/data/56
best/data/57
best/data/58
best/data/59
best/data/6
best/data/60
best/data/61
best/data/62
best/data/63
best/data/64
best/data/65
best/data/66
best/data/67
best/data/68
best/data/69
best/data/7
best/data/70
best/data/71
best/data/72
best/data/73
best/data/74
best/data/75
best/data/76
best/data/77
best/data/78
best/data/79
best/data/8
best/data/80
best/data/81
best/data/82
best/data/83
best/data/84
best/data/85
best/data/86
best/data/87
best/data/88
best/data/89
best/data/9
best/data/90
best/data/91
best/data/92
best/data/93
best/data/94
best/data/95
best/data/96
best/data/97
best/data/98
best/data/99
best/version
MerekV3.08 Lite/Merek Aimbot/lib/pyarmor_runtime_000000/__init__.py
MerekV3.08 Lite/Merek Aimbot/lib/pyarmor_runtime_000000/__pycache__/__init__.cpython-310.pyc
MerekV3.08 Lite/Merek Aimbot/lib/pyarmor_runtime_000000/pyarmor_runtime.pyd
.dll windows:4 windows x64 arch:x64

41b9bfc3d453a3b5fe08786199fc3082

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

python310

PyBuffer_FillInfo
PyBuffer_Release
PyBytes_AsString
PyBytes_AsStringAndSize
PyBytes_FromStringAndSize
PyBytes_Type
PyCFunction_GetSelf
PyCFunction_Type
PyCMethod_New
PyCell_Get
PyCell_New
PyCell_Set
PyCode_NewWithPosOnlyArgs
PyCode_Type
PyComplex_FromCComplex
PyComplex_ImagAsDouble
PyComplex_RealAsDouble
PyComplex_Type
PyDict_Copy
PyDict_DelItem
PyDict_GetItem
PyDict_GetItemString
PyDict_New
PyDict_Next
PyDict_SetItem
PyDict_Type
PyDict_Update
PyErr_CheckSignals
PyErr_Clear
PyErr_ExceptionMatches
PyErr_Fetch
PyErr_Format
PyErr_GivenExceptionMatches
PyErr_NoMemory
PyErr_NormalizeException
PyErr_Occurred
PyErr_Restore
PyErr_SetFromWindowsErr
PyErr_SetImportError
PyErr_SetObject
PyErr_SetString
PyEval_EvalCode
PyEval_GetBuiltins
PyEval_GetFrame
PyEval_GetGlobals
PyExc_AttributeError
PyExc_EOFError
PyExc_ImportError
PyExc_NotImplementedError
PyExc_RuntimeError
PyExc_StopIteration
PyExc_SystemExit
PyExc_TypeError
PyExc_UnboundLocalError
PyExc_ValueError
PyException_SetCause
PyException_SetContext
PyException_SetTraceback
PyFloat_FromDouble
PyFloat_Type
PyFrozenSet_New
PyFrozenSet_Type
PyFunction_GetCode
PyFunction_NewWithQualName
PyImport_ExecCodeModuleObject
PyImport_GetModule
PyImport_GetModuleDict
PyImport_ImportModule
PyImport_ImportModuleLevel
PyImport_ImportModuleLevelObject
PyIter_Next
PyList_Append
PyList_AsTuple
PyList_GetItem
PyList_New
PyList_Type
PyLong_AsLong
PyLong_AsLongAndOverflow
PyLong_AsVoidPtr
PyLong_FromLong
PyLong_FromVoidPtr
PyLong_Type
PyMarshal_ReadObjectFromString
PyMem_Free
PyMem_Malloc
PyMem_Realloc
PyMemoryView_FromBuffer
PyMethod_Function
PyMethod_Type
PyModule_Create2
PyModule_GetDict
PyModule_GetFilenameObject
PyModule_GetName
PyModule_Type
PyNumber_Add
PyNumber_And
PyNumber_AsSsize_t
PyNumber_FloorDivide
PyNumber_InPlaceAdd
PyNumber_InPlaceAnd
PyNumber_InPlaceFloorDivide
PyNumber_InPlaceLshift
PyNumber_InPlaceMatrixMultiply
PyNumber_InPlaceMultiply
PyNumber_InPlaceOr
PyNumber_InPlacePower
PyNumber_InPlaceRemainder
PyNumber_InPlaceRshift
PyNumber_InPlaceSubtract
PyNumber_InPlaceTrueDivide
PyNumber_InPlaceXor
PyNumber_Invert
PyNumber_Lshift
PyNumber_MatrixMultiply
PyNumber_Multiply
PyNumber_Negative
PyNumber_Or
PyNumber_Positive
PyNumber_Power
PyNumber_Remainder
PyNumber_Rshift
PyNumber_Subtract
PyNumber_TrueDivide
PyNumber_Xor
PyOS_double_to_string
PyOS_string_to_double
PyObject_ASCII
PyObject_Call
PyObject_CallFunction
PyObject_CallFunctionObjArgs
PyObject_CallMethod
PyObject_CheckBuffer
PyObject_DelItem
PyObject_Format
PyObject_GetAttr
PyObject_GetAttrString
PyObject_GetBuffer
PyObject_GetItem
PyObject_GetIter
PyObject_IsTrue
PyObject_Repr
PyObject_RichCompare
PyObject_SetAttr
PyObject_SetItem
PyObject_Str
PySequence_Check
PySequence_Contains
PySet_Add
PySet_New
PySet_Type
PySlice_New
PySys_GetObject
PyThreadState_Get
PyTraceBack_Here
PyTuple_GetItem
PyTuple_GetSlice
PyTuple_New
PyTuple_SetItem
PyTuple_Size
PyTuple_Type
PyType_IsSubtype
PyUnicode_AsEncodedString
PyUnicode_AsUTF8
PyUnicode_AsUTF8AndSize
PyUnicode_DecodeUTF8
PyUnicode_FromFormat
PyUnicode_FromKindAndData
PyUnicode_FromString
PyUnicode_InternInPlace
PyUnicode_New
PyUnicode_Type
Py_BuildValue
Py_DecRef
Py_IncRef
Py_InspectFlag
_PyArg_ParseTuple_SizeT
_PyBytes_Resize
_PyDict_GetItemIdWithError
_PyErr_Clear
_PyErr_GetTopmostException
_PyErr_SetString
_PyFloat_Pack8
_PyFloat_Unpack8
_PyList_Extend
_PyLong_AsInt
_PyLong_FromByteArray
_PyLong_New
_PyModuleSpec_IsInitializing
_PyObject_CallFunction_SizeT
_PyObject_CallMethodId_SizeT
_PyObject_CallMethod_SizeT
_PyObject_GetAttrId
_PyObject_LookupAttr
_PyObject_LookupSpecial
_PyObject_MakeTpCall
_PyRuntime
_PySet_NextEntry
_PyUnicode_JoinArray
_Py_BuildValue_SizeT
_Py_CheckFunctionResult
_Py_Dealloc
_Py_EllipsisObject
_Py_FalseStruct
_Py_NoneStruct
_Py_TrueStruct
_Py_fstat_noraise
_Py_hashtable_compare_direct
_Py_hashtable_destroy
_Py_hashtable_hash_ptr
_Py_hashtable_new_full
_Py_hashtable_set

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext

iphlpapi

GetAdaptersAddresses
GetNetworkParams

kernel32

CloseHandle
CreateFileA
CreateFileMappingA
DeleteCriticalSection
DeviceIoControl
EnterCriticalSection
FlushViewOfFile
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetLastError
GetProcAddress
GetProcessHeap
GetSystemTimeAsFileTime
GetTickCount
GlobalAlloc
GlobalFree
HeapAlloc
HeapFree
InitializeCriticalSection
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryA
LocalFree
MapViewOfFile
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualLock
VirtualProtect
VirtualQuery
VirtualUnlock

msvcrt

__iob_func
_amsg_exit
_fileno
_errno
_get_osfhandle
_initterm
_lock
_mktime64
_snprintf
_stat64
_time64
_unlock
_vsnprintf
abort
calloc
clock
exit
fprintf
fputc
fread
free
fwrite
getc
getenv
isprint
isxdigit
malloc
memcmp
memcpy
memmove
memset
rand
realloc
signal
sprintf
srand
strchr
strcmp
strerror
strlen
strncmp
strncpy
strrchr
strstr
toupper
vfprintf

user32

wsprintfA

ws2_32

WSACleanup
WSAGetLastError
WSAStartup
closesocket
connect
gethostbyname
htons
inet_ntoa
ioctlsocket
ntohl
recv
recvfrom
select
send
sendto
setsockopt
socket

Exports

Exports

PyInit_pyarmor_runtime

Sections

.text
Size: 504KB - Virtual size: 504KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 25KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MerekV3.08 Lite/Merek Aimbot/merek.py
MerekV3.08 Lite/Merek Aimbot/pyarmor_runtime_000000/__init__.py
MerekV3.08 Lite/Merek Aimbot/pyarmor_runtime_000000/__pycache__/__init__.cpython-310.pyc
MerekV3.08 Lite/Merek Aimbot/pyarmor_runtime_000000/pyarmor_runtime.pyd
.dll windows:4 windows x64 arch:x64

41b9bfc3d453a3b5fe08786199fc3082

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

python310

PyBuffer_FillInfo
PyBuffer_Release
PyBytes_AsString
PyBytes_AsStringAndSize
PyBytes_FromStringAndSize
PyBytes_Type
PyCFunction_GetSelf
PyCFunction_Type
PyCMethod_New
PyCell_Get
PyCell_New
PyCell_Set
PyCode_NewWithPosOnlyArgs
PyCode_Type
PyComplex_FromCComplex
PyComplex_ImagAsDouble
PyComplex_RealAsDouble
PyComplex_Type
PyDict_Copy
PyDict_DelItem
PyDict_GetItem
PyDict_GetItemString
PyDict_New
PyDict_Next
PyDict_SetItem
PyDict_Type
PyDict_Update
PyErr_CheckSignals
PyErr_Clear
PyErr_ExceptionMatches
PyErr_Fetch
PyErr_Format
PyErr_GivenExceptionMatches
PyErr_NoMemory
PyErr_NormalizeException
PyErr_Occurred
PyErr_Restore
PyErr_SetFromWindowsErr
PyErr_SetImportError
PyErr_SetObject
PyErr_SetString
PyEval_EvalCode
PyEval_GetBuiltins
PyEval_GetFrame
PyEval_GetGlobals
PyExc_AttributeError
PyExc_EOFError
PyExc_ImportError
PyExc_NotImplementedError
PyExc_RuntimeError
PyExc_StopIteration
PyExc_SystemExit
PyExc_TypeError
PyExc_UnboundLocalError
PyExc_ValueError
PyException_SetCause
PyException_SetContext
PyException_SetTraceback
PyFloat_FromDouble
PyFloat_Type
PyFrozenSet_New
PyFrozenSet_Type
PyFunction_GetCode
PyFunction_NewWithQualName
PyImport_ExecCodeModuleObject
PyImport_GetModule
PyImport_GetModuleDict
PyImport_ImportModule
PyImport_ImportModuleLevel
PyImport_ImportModuleLevelObject
PyIter_Next
PyList_Append
PyList_AsTuple
PyList_GetItem
PyList_New
PyList_Type
PyLong_AsLong
PyLong_AsLongAndOverflow
PyLong_AsVoidPtr
PyLong_FromLong
PyLong_FromVoidPtr
PyLong_Type
PyMarshal_ReadObjectFromString
PyMem_Free
PyMem_Malloc
PyMem_Realloc
PyMemoryView_FromBuffer
PyMethod_Function
PyMethod_Type
PyModule_Create2
PyModule_GetDict
PyModule_GetFilenameObject
PyModule_GetName
PyModule_Type
PyNumber_Add
PyNumber_And
PyNumber_AsSsize_t
PyNumber_FloorDivide
PyNumber_InPlaceAdd
PyNumber_InPlaceAnd
PyNumber_InPlaceFloorDivide
PyNumber_InPlaceLshift
PyNumber_InPlaceMatrixMultiply
PyNumber_InPlaceMultiply
PyNumber_InPlaceOr
PyNumber_InPlacePower
PyNumber_InPlaceRemainder
PyNumber_InPlaceRshift
PyNumber_InPlaceSubtract
PyNumber_InPlaceTrueDivide
PyNumber_InPlaceXor
PyNumber_Invert
PyNumber_Lshift
PyNumber_MatrixMultiply
PyNumber_Multiply
PyNumber_Negative
PyNumber_Or
PyNumber_Positive
PyNumber_Power
PyNumber_Remainder
PyNumber_Rshift
PyNumber_Subtract
PyNumber_TrueDivide
PyNumber_Xor
PyOS_double_to_string
PyOS_string_to_double
PyObject_ASCII
PyObject_Call
PyObject_CallFunction
PyObject_CallFunctionObjArgs
PyObject_CallMethod
PyObject_CheckBuffer
PyObject_DelItem
PyObject_Format
PyObject_GetAttr
PyObject_GetAttrString
PyObject_GetBuffer
PyObject_GetItem
PyObject_GetIter
PyObject_IsTrue
PyObject_Repr
PyObject_RichCompare
PyObject_SetAttr
PyObject_SetItem
PyObject_Str
PySequence_Check
PySequence_Contains
PySet_Add
PySet_New
PySet_Type
PySlice_New
PySys_GetObject
PyThreadState_Get
PyTraceBack_Here
PyTuple_GetItem
PyTuple_GetSlice
PyTuple_New
PyTuple_SetItem
PyTuple_Size
PyTuple_Type
PyType_IsSubtype
PyUnicode_AsEncodedString
PyUnicode_AsUTF8
PyUnicode_AsUTF8AndSize
PyUnicode_DecodeUTF8
PyUnicode_FromFormat
PyUnicode_FromKindAndData
PyUnicode_FromString
PyUnicode_InternInPlace
PyUnicode_New
PyUnicode_Type
Py_BuildValue
Py_DecRef
Py_IncRef
Py_InspectFlag
_PyArg_ParseTuple_SizeT
_PyBytes_Resize
_PyDict_GetItemIdWithError
_PyErr_Clear
_PyErr_GetTopmostException
_PyErr_SetString
_PyFloat_Pack8
_PyFloat_Unpack8
_PyList_Extend
_PyLong_AsInt
_PyLong_FromByteArray
_PyLong_New
_PyModuleSpec_IsInitializing
_PyObject_CallFunction_SizeT
_PyObject_CallMethodId_SizeT
_PyObject_CallMethod_SizeT
_PyObject_GetAttrId
_PyObject_LookupAttr
_PyObject_LookupSpecial
_PyObject_MakeTpCall
_PyRuntime
_PySet_NextEntry
_PyUnicode_JoinArray
_Py_BuildValue_SizeT
_Py_CheckFunctionResult
_Py_Dealloc
_Py_EllipsisObject
_Py_FalseStruct
_Py_NoneStruct
_Py_TrueStruct
_Py_fstat_noraise
_Py_hashtable_compare_direct
_Py_hashtable_destroy
_Py_hashtable_hash_ptr
_Py_hashtable_new_full
_Py_hashtable_set

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext

iphlpapi

GetAdaptersAddresses
GetNetworkParams

kernel32

CloseHandle
CreateFileA
CreateFileMappingA
DeleteCriticalSection
DeviceIoControl
EnterCriticalSection
FlushViewOfFile
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetLastError
GetProcAddress
GetProcessHeap
GetSystemTimeAsFileTime
GetTickCount
GlobalAlloc
GlobalFree
HeapAlloc
HeapFree
InitializeCriticalSection
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryA
LocalFree
MapViewOfFile
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualLock
VirtualProtect
VirtualQuery
VirtualUnlock

msvcrt

__iob_func
_amsg_exit
_fileno
_errno
_get_osfhandle
_initterm
_lock
_mktime64
_snprintf
_stat64
_time64
_unlock
_vsnprintf
abort
calloc
clock
exit
fprintf
fputc
fread
free
fwrite
getc
getenv
isprint
isxdigit
malloc
memcmp
memcpy
memmove
memset
rand
realloc
signal
sprintf
srand
strchr
strcmp
strerror
strlen
strncmp
strncpy
strrchr
strstr
toupper
vfprintf

user32

wsprintfA

ws2_32

WSACleanup
WSAGetLastError
WSAStartup
closesocket
connect
gethostbyname
htons
inet_ntoa
ioctlsocket
ntohl
recv
recvfrom
select
send
sendto
setsockopt
socket

Exports

Exports

PyInit_pyarmor_runtime

Sections

.text
Size: 504KB - Virtual size: 504KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 25KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MerekV3.08 Lite/Merek Aimbot/requirements.txt
MerekV3.08 Lite/Merek Aimbot/start.bat

Resubmissions

Sharing

General

Malware Config

Signatures

Files

41b9bfc3d453a3b5fe08786199fc3082

Headers

File Characteristics

Imports

python310

advapi32

iphlpapi

kernel32

msvcrt

user32

ws2_32

Exports

Exports

Sections

.text Size: 504KB - Virtual size: 504KB

.data Size: 18KB - Virtual size: 18KB

.rdata Size: 48KB - Virtual size: 47KB

.pdata Size: 9KB - Virtual size: 8KB

.xdata Size: 9KB - Virtual size: 9KB

.bss Size: - Virtual size: 25KB

.edata Size: 512B - Virtual size: 93B

.idata Size: 13KB - Virtual size: 12KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 1024B - Virtual size: 680B

41b9bfc3d453a3b5fe08786199fc3082

Headers

File Characteristics

Imports

python310

advapi32

iphlpapi

kernel32

msvcrt

user32

ws2_32

Exports

Exports

Sections

.text Size: 504KB - Virtual size: 504KB

.data Size: 18KB - Virtual size: 18KB

.rdata Size: 48KB - Virtual size: 47KB

.pdata Size: 9KB - Virtual size: 8KB

.xdata Size: 9KB - Virtual size: 9KB

.bss Size: - Virtual size: 25KB

.edata Size: 512B - Virtual size: 93B

.idata Size: 13KB - Virtual size: 12KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 1024B - Virtual size: 680B

.text
Size: 504KB - Virtual size: 504KB

.data
Size: 18KB - Virtual size: 18KB

.rdata
Size: 48KB - Virtual size: 47KB

.pdata
Size: 9KB - Virtual size: 8KB

.xdata
Size: 9KB - Virtual size: 9KB

.bss
Size: - Virtual size: 25KB

.edata
Size: 512B - Virtual size: 93B

.idata
Size: 13KB - Virtual size: 12KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 1024B - Virtual size: 680B

.text
Size: 504KB - Virtual size: 504KB

.data
Size: 18KB - Virtual size: 18KB

.rdata
Size: 48KB - Virtual size: 47KB

.pdata
Size: 9KB - Virtual size: 8KB

.xdata
Size: 9KB - Virtual size: 9KB

.bss
Size: - Virtual size: 25KB

.edata
Size: 512B - Virtual size: 93B

.idata
Size: 13KB - Virtual size: 12KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 1024B - Virtual size: 680B