General
-
Target
shadowapi.exe
-
Size
14.4MB
-
MD5
3888625daaafdb98bf85bf9c79dbe483
-
SHA1
41cab789f975f068ee7ce69491995607db5f06ad
-
SHA256
52a6d1c7746a692b493e8524b042afa64d84c9f84d2448ecf5ba98bfc2b35304
-
SHA512
bfc7ebf8e90ffdc916a7bc5f8adb71cb54838e58c98dd15d4e49ee16a966796061ca3888a2b00eb7f284c5aa7386f6d9c79c1ba5d70debfa4e60d1228ac8e8a9
-
SSDEEP
393216:aEkZQVBl80QAIyCEDLJ83a10KqXdwWJN4s3hU2eeLZc:ahQVj80QABCEDtEaqtw8af
Score
10/10
Malware Config
Signatures
-
An infostealer written in Python and packaged with PyInstaller. 1 IoCs
-
Crealstealer family
-
Detects Pyinstaller 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
shadowapi.exe
f4f2e2b03fe5666a721620fcea3aea9b
Headers
Imports
Sections
-
Creal.pyc