General

  • Target

    build.zip

  • Size

    105.2MB

  • MD5

    ae823696e156759156dde410a6723ecd

  • SHA1

    aa7340b9dc6b64987f65dd6fd13124441ea9c0e8

  • SHA256

    ea9a378dc3b6c2e0c8250d8eb156e878cefaf0292a66e52e8c8182b717f9acd9

  • SHA512

    689b82b32d13e9a0c8f6cdb0347070addb8b8dff598b78d293e2c8c5d9f8c1d87ef7a5bcf42c0a53f16baf7c2b1afdaaa9d296693d1c5de8610230ec391d16ab

  • SSDEEP

    3145728:xAPi5YZS4t/x23d5X6Ex74iK1sGMCZKVSQ:xAPpp2vVK1FMoK4Q

Score
3/10

Malware Config

Signatures

  • Detects Pyinstaller 2 IoCs
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • build.zip
    .zip
  • drawbot.exe
    .exe windows:6 windows x64 arch:x64

    4d0fb8dc9ee470058274f448bebbb85f


    Headers

    Imports

    Exports

    Sections

  • gui.exe
    .exe windows:5 windows x64 arch:x64

    69eb46a9f63edcc604b0bdaaa8e0f2f5


    Headers

    Imports

    Sections

  • gui.pyc
  • initializePositions.exe
    .exe windows:5 windows x64 arch:x64

    69eb46a9f63edcc604b0bdaaa8e0f2f5


    Headers

    Imports

    Sections

  • initializePositions.pyc
  • start.bat