General

  • Target

    DrawBot.zip

  • Size

    32.2MB

  • MD5

    569762e92960d9a2406cdbad56e88b91

  • SHA1

    f7852978d15205c2a3ee5279d3d4fca30c7b2ddd

  • SHA256

    3b1fa4d6b9318b717472753772fdbff5d8d7ec43d1e67f80d479ae15e62f66ff

  • SHA512

    dcf26b714a699c6ff970d61346a9668b42a8f5c43c6639084b4f081b8bf1d77bf734d22385a2d4909e6b6d73cc0287b9e546a9fb3c05c1cdc351313df6f3b10e

  • SSDEEP

    786432:DodHRxV2siPErOtGe6VsQZg6Hdvu67QSnabx8wkk:D2/V2sgOOp6VsQZg6Hdp7QSnayXk

Score
3/10

Malware Config

Signatures

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • DrawBot.zip
    .zip
  • DrawBot/DrawBot.exe
    .exe windows:5 windows x86 arch:x86

    4f699d9195f8b90fd792f147d3831279


    Headers

    Imports

    Sections

  • app.pyc
  • drawbot.pyc
  • utils.pyc
  • DrawBot/DrawBot.exe.manifest
    .xml
  • DrawBot/Include/pyconfig.h
  • DrawBot/MSVCP140.dll
    .dll windows:6 windows x86 arch:x86

    e1960ead066eca55c4492b941249fb99


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/MSVCP140_1.dll
    .dll windows:6 windows x86 arch:x86

    b783879e062a97e0892b4f847ccc585b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/PIL/_imaging.cp38-win32.pyd
    .dll windows:6 windows x86 arch:x86

    dd84a22e34aca116f32ab74156f55f7a


    Headers

    Imports

    Exports

    Sections

  • DrawBot/PIL/_imagingtk.cp38-win32.pyd
    .dll windows:6 windows x86 arch:x86

    85f6207f2f9839768b2f70538fbd010e


    Headers

    Imports

    Exports

    Sections

  • DrawBot/PIL/_webp.cp38-win32.pyd
    .dll windows:6 windows x86 arch:x86

    b0a9dcea1773dcdd76ecaabc8dd2d957


    Headers

    Imports

    Exports

    Sections

  • DrawBot/PyQt5/Qt/plugins/iconengines/qsvgicon.dll
    .dll windows:6 windows x86 arch:x86

    e2a8abb2f62e90497419fca861c4de3a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/PyQt5/Qt/plugins/imageformats/qgif.dll
    .dll windows:6 windows x86 arch:x86

    5fd27c15059ed7d25ce61b5068776b9e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/PyQt5/Qt/plugins/imageformats/qicns.dll
    .dll windows:6 windows x86 arch:x86

    e9072e2a0e32154032ac95db134bc344


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/PyQt5/Qt/plugins/imageformats/qico.dll
    .dll windows:6 windows x86 arch:x86

    b127d2b5eb2d64741e8cf3a684f53083


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/PyQt5/Qt/plugins/imageformats/qjpeg.dll
    .dll windows:6 windows x86 arch:x86

    0ee7f60098b60d828daa90a658ce1e89


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/PyQt5/Qt/plugins/imageformats/qsvg.dll
    .dll windows:6 windows x86 arch:x86

    99e575340214e1344b829f73fc103448


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/PyQt5/Qt/plugins/imageformats/qtga.dll
    .dll windows:6 windows x86 arch:x86

    5d2534ece75e4b6d48b90a3a5ab461ae


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/PyQt5/Qt/plugins/imageformats/qtiff.dll
    .dll windows:6 windows x86 arch:x86

    2388c0b64a24970ee09483c444670343


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/PyQt5/Qt/plugins/imageformats/qwbmp.dll
    .dll windows:6 windows x86 arch:x86

    cb222c05c5fe195a9fc1087938b86d12


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/PyQt5/Qt/plugins/imageformats/qwebp.dll
    .dll windows:6 windows x86 arch:x86

    92b10182dd96972184b6f43d0e7f28dd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/PyQt5/Qt/plugins/platforms/qminimal.dll
    .dll windows:6 windows x86 arch:x86

    74aa4d54a4cfe559c9bdbd3b3a5f40d1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/PyQt5/Qt/plugins/platforms/qoffscreen.dll
    .dll windows:6 windows x86 arch:x86

    5c6391e49087f7f6893ad18471bd87ef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/PyQt5/Qt/plugins/platforms/qwebgl.dll
    .dll windows:6 windows x86 arch:x86

    ab5da60f88dfab52361d150fb0d5b1a1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/PyQt5/Qt/plugins/platforms/qwindows.dll
    .dll windows:6 windows x86 arch:x86

    29ed2e73839186c2a3b5a58cddc0eb48


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/PyQt5/Qt/plugins/platformthemes/qxdgdesktopportal.dll
    .dll windows:6 windows x86 arch:x86

    b14e90cd5ac3b42e54f7034e1c6bf066


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/PyQt5/Qt/plugins/styles/qwindowsvistastyle.dll
    .dll windows:6 windows x86 arch:x86

    0404caa26e442821bc38f28b50ba0493


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/PyQt5/Qt/translations/qtbase_ar.qm
  • DrawBot/PyQt5/Qt/translations/qtbase_bg.qm
  • DrawBot/PyQt5/Qt/translations/qtbase_ca.qm
  • DrawBot/PyQt5/Qt/translations/qtbase_cs.qm
  • DrawBot/PyQt5/Qt/translations/qtbase_da.qm
  • DrawBot/PyQt5/Qt/translations/qtbase_de.qm
  • DrawBot/PyQt5/Qt/translations/qtbase_en.qm
  • DrawBot/PyQt5/Qt/translations/qtbase_es.qm
  • DrawBot/PyQt5/Qt/translations/qtbase_fi.qm
  • DrawBot/PyQt5/Qt/translations/qtbase_fr.qm
  • DrawBot/PyQt5/Qt/translations/qtbase_gd.qm
  • DrawBot/PyQt5/Qt/translations/qtbase_he.qm
  • DrawBot/PyQt5/Qt/translations/qtbase_hu.qm
  • DrawBot/PyQt5/Qt/translations/qtbase_it.qm
  • DrawBot/PyQt5/Qt/translations/qtbase_ja.qm
  • DrawBot/PyQt5/Qt/translations/qtbase_ko.qm
  • DrawBot/PyQt5/Qt/translations/qtbase_lv.qm
  • DrawBot/PyQt5/Qt/translations/qtbase_pl.qm
  • DrawBot/PyQt5/Qt/translations/qtbase_ru.qm
  • DrawBot/PyQt5/Qt/translations/qtbase_sk.qm
  • DrawBot/PyQt5/Qt/translations/qtbase_tr.qm
  • DrawBot/PyQt5/Qt/translations/qtbase_uk.qm
  • DrawBot/PyQt5/Qt/translations/qtbase_zh_TW.qm
  • DrawBot/PyQt5/QtCore.pyd
    .dll windows:6 windows x86 arch:x86

    e1deea28cd596dc2e5962f9d918079a5


    Headers

    Imports

    Exports

    Sections

  • DrawBot/PyQt5/QtGui.pyd
    .dll windows:6 windows x86 arch:x86

    6538c1e3753f1b256c3503a329e0c5e9


    Headers

    Imports

    Exports

    Sections

  • DrawBot/PyQt5/QtWidgets.pyd
    .dll windows:6 windows x86 arch:x86

    a1cc05d43d16e50efb2f1126e27e597f


    Headers

    Imports

    Exports

    Sections

  • DrawBot/PyQt5/QtWinExtras.pyd
    .dll windows:6 windows x86 arch:x86

    c6ca55d836c805dbd64f356189db6718


    Headers

    Imports

    Exports

    Sections

  • DrawBot/PyQt5/sip.cp38-win32.pyd
    .dll windows:6 windows x86 arch:x86

    6dd3895f4f3c5063eca45bb83ebfc88a


    Headers

    Imports

    Exports

    Sections

  • DrawBot/Qt5Core.dll
    .dll windows:6 windows x86 arch:x86

    92fc526ad6d9674f09604104cfa57819


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/Qt5DBus.dll
    .dll windows:6 windows x86 arch:x86

    a2a043528ae20fdcbc54087a0ed47489


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/Qt5Gui.dll
    .dll windows:6 windows x86 arch:x86

    443275a6eb00ad3c85c2bc9c3fc2da3e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/Qt5Network.dll
    .dll windows:6 windows x86 arch:x86

    21f558b450210bd1bd9ad26b203188e0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/Qt5Qml.dll
    .dll windows:6 windows x86 arch:x86

    1fd44f6df8b7c02f1c6b3a63b910f091


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/Qt5QmlModels.dll
    .dll windows:6 windows x86 arch:x86

    bdcc9abef23a6cf5114ffaefd67b610c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/Qt5Quick.dll
    .dll windows:6 windows x86 arch:x86

    1578ac601282c9a3500771781dafd495


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/Qt5Svg.dll
    .dll windows:6 windows x86 arch:x86

    079b726a4a2f3a027f09f1cb4e2ed381


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/Qt5WebSockets.dll
    .dll windows:6 windows x86 arch:x86

    c02a6d391ce04feb3166f7c3a04f17ee


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/Qt5Widgets.dll
    .dll windows:6 windows x86 arch:x86

    7485e296f2ad020a3dedc3de1b20dcfc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/Qt5WinExtras.dll
    .dll windows:6 windows x86 arch:x86

    6a5932ee8dcef2f266e2e0e799f280b3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/VCRUNTIME140.dll
    .dll windows:6 windows x86 arch:x86

    05ee269bbd58f4ebb1d7a6c0c63662e8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/_asyncio.pyd
    .dll windows:6 windows x86 arch:x86

    b3635a728c6a667b7b1979ca0953aba7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/_bz2.pyd
    .dll windows:6 windows x86 arch:x86

    f14f929c991a582318a3e387e66cc534


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/_cffi_backend.cp38-win32.pyd
    .dll windows:6 windows x86 arch:x86

    90f88bfa50fad56b37afce04994abe87


    Headers

    Imports

    Exports

    Sections

  • DrawBot/_ctypes.pyd
    .dll windows:6 windows x86 arch:x86

    efe6dc5539e8d041aef5b37d6211a76c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/_decimal.pyd
    .dll windows:6 windows x86 arch:x86

    ddb70ebc8e79609f043014c1b28940a1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/_hashlib.pyd
    .dll windows:6 windows x86 arch:x86

    87e31924bedb84b850b08a07dccfc9f1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/_lzma.pyd
    .dll windows:6 windows x86 arch:x86

    5499d8ac314a3919003e30bcbb3df9f5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/_multiprocessing.pyd
    .dll windows:6 windows x86 arch:x86

    5c46ce88ba4909ee7f3fceaf82c4314a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/_overlapped.pyd
    .dll windows:6 windows x86 arch:x86

    5a504e73f0d74aee5b1d6e1f5cb66ed6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/_queue.pyd
    .dll windows:6 windows x86 arch:x86

    76e5cd7eacf3c7a68ad0e63577518d02


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/_socket.pyd
    .dll .js windows:6 windows x86 arch:x86 polyglot

    46e19181f7e36e41fddbb86a95110505


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/_ssl.pyd
    .dll windows:6 windows x86 arch:x86

    372dda40354c688af327e7a1526e09fb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/base_library.zip
    .zip
  • _bootlocale.pyc
  • _collections_abc.pyc
  • _weakrefset.pyc
  • abc.pyc
  • codecs.pyc
  • collections/__init__.pyc
  • collections/abc.pyc
  • copyreg.pyc
  • encodings/__init__.pyc
  • encodings/aliases.pyc
  • encodings/ascii.pyc
  • encodings/base64_codec.pyc
  • encodings/big5.pyc
  • encodings/big5hkscs.pyc
  • encodings/bz2_codec.pyc
  • encodings/charmap.pyc
  • encodings/cp037.pyc
  • encodings/cp1006.pyc
  • encodings/cp1026.pyc
  • encodings/cp1125.pyc
  • encodings/cp1140.pyc
  • encodings/cp1250.pyc
  • encodings/cp1251.pyc
  • encodings/cp1252.pyc
  • encodings/cp1253.pyc
  • encodings/cp1254.pyc
  • encodings/cp1255.pyc
  • encodings/cp1256.pyc
  • encodings/cp1257.pyc
  • encodings/cp1258.pyc
  • encodings/cp273.pyc
  • encodings/cp424.pyc
  • encodings/cp437.pyc
  • encodings/cp500.pyc
  • encodings/cp720.pyc
  • encodings/cp737.pyc
  • encodings/cp775.pyc
  • encodings/cp850.pyc
  • encodings/cp852.pyc
  • encodings/cp855.pyc
  • encodings/cp856.pyc
  • encodings/cp857.pyc
  • encodings/cp858.pyc
  • encodings/cp860.pyc
  • encodings/cp861.pyc
  • encodings/cp862.pyc
  • encodings/cp863.pyc
  • encodings/cp864.pyc
  • encodings/cp865.pyc
  • encodings/cp866.pyc
  • encodings/cp869.pyc
  • encodings/cp874.pyc
  • encodings/cp875.pyc
  • encodings/cp932.pyc
  • encodings/cp949.pyc
  • encodings/cp950.pyc
  • encodings/euc_jis_2004.pyc
  • encodings/euc_jisx0213.pyc
  • encodings/euc_jp.pyc
  • encodings/euc_kr.pyc
  • encodings/gb18030.pyc
  • encodings/gb2312.pyc
  • encodings/gbk.pyc
  • encodings/hex_codec.pyc
  • encodings/hp_roman8.pyc
  • encodings/hz.pyc
  • encodings/idna.pyc
  • encodings/iso2022_jp.pyc
  • encodings/iso2022_jp_1.pyc
  • encodings/iso2022_jp_2.pyc
  • encodings/iso2022_jp_2004.pyc
  • encodings/iso2022_jp_3.pyc
  • encodings/iso2022_jp_ext.pyc
  • encodings/iso2022_kr.pyc
  • encodings/iso8859_1.pyc
  • encodings/iso8859_10.pyc
  • encodings/iso8859_11.pyc
  • encodings/iso8859_13.pyc
  • encodings/iso8859_14.pyc
  • encodings/iso8859_15.pyc
  • encodings/iso8859_16.pyc
  • encodings/iso8859_2.pyc
  • encodings/iso8859_3.pyc
  • encodings/iso8859_4.pyc
  • encodings/iso8859_5.pyc
  • encodings/iso8859_6.pyc
  • encodings/iso8859_7.pyc
  • encodings/iso8859_8.pyc
  • encodings/iso8859_9.pyc
  • encodings/johab.pyc
  • encodings/koi8_r.pyc
  • encodings/koi8_t.pyc
  • encodings/koi8_u.pyc
  • encodings/kz1048.pyc
  • encodings/latin_1.pyc
  • encodings/mac_arabic.pyc
  • encodings/mac_centeuro.pyc
  • encodings/mac_croatian.pyc
  • encodings/mac_cyrillic.pyc
  • encodings/mac_farsi.pyc
  • encodings/mac_greek.pyc
  • encodings/mac_iceland.pyc
  • encodings/mac_latin2.pyc
  • encodings/mac_roman.pyc
  • encodings/mac_romanian.pyc
  • encodings/mac_turkish.pyc
  • encodings/mbcs.pyc
  • encodings/oem.pyc
  • encodings/palmos.pyc
  • encodings/ptcp154.pyc
  • encodings/punycode.pyc
  • encodings/quopri_codec.pyc
  • encodings/raw_unicode_escape.pyc
  • encodings/rot_13.pyc
  • encodings/shift_jis.pyc
  • encodings/shift_jis_2004.pyc
  • encodings/shift_jisx0213.pyc
  • encodings/tis_620.pyc
  • encodings/undefined.pyc
  • encodings/unicode_escape.pyc
  • encodings/utf_16.pyc
  • encodings/utf_16_be.pyc
  • encodings/utf_16_le.pyc
  • encodings/utf_32.pyc
  • encodings/utf_32_be.pyc
  • encodings/utf_32_le.pyc
  • encodings/utf_7.pyc
  • encodings/utf_8.pyc
  • encodings/utf_8_sig.pyc
  • encodings/uu_codec.pyc
  • encodings/zlib_codec.pyc
  • enum.pyc
  • functools.pyc
  • heapq.pyc
  • io.pyc
  • keyword.pyc
  • linecache.pyc
  • locale.pyc
  • operator.pyc
  • re.pyc
  • reprlib.pyc
  • sre_compile.pyc
  • sre_constants.pyc
  • sre_parse.pyc
  • traceback.pyc
  • types.pyc
  • warnings.pyc
  • weakref.pyc
  • DrawBot/certifi/cacert.pem
  • DrawBot/colorPalettes/garticColors.txt
  • DrawBot/colorPalettes/garticCoordinates.txt
  • DrawBot/colorPalettes/paintColors.txt
  • DrawBot/colorPalettes/paintCoordinates.txt
  • DrawBot/colorPalettes/skribblColors.txt
  • DrawBot/colorPalettes/skribblCoordinates.txt
  • DrawBot/d3dcompiler_47.dll
    .dll windows:6 windows x86 arch:x86

    f63cad154afed6da772d0ab361f448f6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/drawbot.ico
  • DrawBot/libEGL.dll
    .dll windows:6 windows x86 arch:x86

    9c98d3b5bee3ee0c5c0fdfcb4d295c31


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/libGLESv2.dll
    .dll windows:6 windows x86 arch:x86

    f8b0d2c74b0eba5e3cf30c77474b84b1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/libcrypto-1_1.dll
    .dll windows:6 windows x86 arch:x86

    993da743dc066af7c54afc4bb08b7e02


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/libffi-7.dll
    .dll windows:6 windows x86 arch:x86

    414c0669f9e0759f6229040d3ceb686f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/libssl-1_1.dll
    .dll windows:6 windows x86 arch:x86

    770cd10463d5f5baf39998cfc29aea2a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/opengl32sw.dll
    .dll windows:6 windows x86 arch:x86

    96787902f59fced940d332fc8148bd5c


    Headers

    Imports

    Exports

    Sections

  • DrawBot/pyexpat.pyd
    .dll windows:6 windows x86 arch:x86

    2e9e4394367be537ce3d15e521f8df83


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/python3.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • DrawBot/python38.dll
    .dll windows:6 windows x86 arch:x86

    49d8410df96c6f84a00b40a091357c0b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/select.pyd
    .dll windows:6 windows x86 arch:x86

    ca105aa03334cc4176bc1dec4efabeb0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DrawBot/unicodedata.pyd
    .dll windows:6 windows x86 arch:x86

    46f961f44c37520d564cec34831a1349


    Code Sign

    Headers

    Imports

    Exports

    Sections