DDoS-Ripper Pro[.]zip

resource
unpack001/DDoS-Ripper Pro/pytransform/_pytransform.dll

DDoS-Ripper Pro.zip

SHA256 ce27061cd0f707eed21d820be9d086fe0b313e6d93f735d4600126e3fb73dcf7
MD5 e5620544131156d9bc88eff166162c0e
SHA1 79595e1b12fef86bef02a1d1c46224790b9797a3
SHA512 50b06435c1c0f2a2675510b532d307a4ac715175b7707919197ef23ff3833d9c4560af2c97345d28a8b2aa873d93da7f674f0c5469417401cb3ca46221f31b7a
SSDEEP 12288:G41BIOWMxCySfUtYr2p8Y8b7kZutM9ZExZlzTmOS93QGVCc:G41BIOp49r2+Y8bIZu69ZErlzTxjGVd
MD5 SHA1 SHA512 SSDEEP

DDoS-Ripper Pro/DRipper.py

SHA256 2f8ffe7521b02a75326cbd70a1783294809fb0c6e3f6a02af72bdc86bf1d7b36
MD5 836fb4703be19909e41c9b5f8db4b357
SHA1 b99ef3621d34d01597c4ebeda84a08584f630068
SHA512 b941cfa9519f9b021bffc67499ce9552015c72dcf2511b6d5500dc495e63e028fc3de9990ef17e842e0705f338d1520ab76ddac3c674641800b6a7eafaba0bec
SSDEEP 768:0H91otr8AvZxM6DoFUD6iNUTRUvbV8M3s30MoT3ECBY5jZIJZGmwKS:0HDO/6UD6iNYRQJ8Mc30plY5mJwmc
MD5 SHA1 SHA512 SSDEEP

DDoS-Ripper Pro/headers.txt

SHA256 9b810c68ac86c8167c878bd45cb99eb73b8588dd531cc789bec9b9294bc2d529
MD5 5a7fc935a746ffbcadd2d720c9c8562b
SHA1 8cf1912053f6588ccb3cb3325e761e5cd71eb398
SHA512 3aa6adcd98cd2b076c09a4db59b802f532cdcdb44ed7ff63fa1aac6036f972af369d6727779b0b68507ebf6caefdc05236e38091a33f4ef3c821618c77ac8a06
MD5 SHA1 SHA512

DDoS-Ripper Pro/pytransform/init.py

SHA256 4207a171269b22a0b2eb75f7fab0b2912d9da63453d43cce9a7d808730934a1a
MD5 ad549846d2ee1fdf93ee1d5f52cc8401
SHA1 dc8653cd3502b99b00b04de613861b4ede2bc846
SHA512 c12f36fd9a89c7b0c46e3b47b262f7bbae63f3b7e38db4e8642f9258823678f0afff49b493fa707ef2688b409e6333749b438d33c0996e4fca31c7fc38612252
SSDEEP 192:sIRqXEqbHCTMRNhvyRW3Tt3JbtZeFRuJ0X9d1X2wiQvrT7k/aJdlGbc8/SXRl3RJ:sF3Fyu8FJYEjlh8c
MD5 SHA1 SHA512 SSDEEP

DDoS-Ripper Pro/pytransform/pycache/init.cpython-38.pyc

SHA256 10c5cb910c18b4bbfd57ea861f327f28c34cc607bdbb6022e904f0e6fd1ae414
MD5 ef205108a644367eb72a426aa0937304
SHA1 541b6906da13a79ce87c7696cd7e07db68238a45
SHA512 a61c240a84e93481c67ee875f530db6bfdaeeec61eb928d0e70dd70d23ab2470786131eed2fe4dbb80d20408947439bbd0e137c094c44563569ace575bf5ab2e
SSDEEP 192:WR52l5YS/RUHvy3qWJcm+R/G+qOEv4yqxbPSUUJU1T6YaP+wOR:Wrs34nm+k+qXv4yqlPSbJKayR
MD5 SHA1 SHA512 SSDEEP

DDoS-Ripper Pro/pytransform/_pytransform.dll

IMPHASH 0f7a3d01e95a1b06e9ee00e9ffd63a4f
SHA256 a200030feb7d83b39d249f1e39141b34234437780842cc4f4869edd2f253d435
MD5 41e4a13fe6da012977223734237f4548
SHA1 7e66a8f08b96505e16520a01d5cbb72e06491d2a
SHA512 6a37b0fd3202558c000c8426d6914956604ab583e837c3033a962fe2ce8b31f5c7c240b0b7c7c19d2f8e18e5d60eaef9983995e675abaae954182ad3f97ce980
SSDEEP 24576:4tMBvpcZzdcZ7fUoPOSJiV9nZdencCnQBR:VvpcdPZsn4R
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4912

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

advapi32

CryptAcquireContextA CryptGenRandom CryptReleaseContext

iphlpapi

GetAdaptersAddresses GetNetworkParams

kernel32

CloseHandle CreateFileA CreateFileMappingA DeleteCriticalSection DeviceIoControl EnterCriticalSection FlushViewOfFile FormatMessageA GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetLastError GetModuleFileNameW GetProcAddress GetProcessHeap GetSystemInfo GetSystemTimeAsFileTime GetThreadContext GetTickCount GetVersion GlobalAlloc GlobalFree HeapAlloc HeapFree InitializeCriticalSection IsDebuggerPresent LeaveCriticalSection LoadLibraryA LocalFree MapViewOfFile MultiByteToWideChar QueryPerformanceCounter RtlAddFunctionTable RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetThreadContext SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter UnmapViewOfFile VirtualAlloc VirtualFree VirtualLock VirtualProtect VirtualQuery VirtualUnlock

msvcrt

__iob_func _access _amsg_exit _errno _exit _get_osfhandle _initterm _lock _snprintf _snwprintf _stat64 _strdup _time64 _unlock _vsnprintf _waccess _wfopen abort atof calloc clock exit fclose fopen fprintf fputc fread free fseek ftell fwprintf fwrite getenv isprint isxdigit malloc memcmp memcpy memmove memset putc qsort raise rand realloc signal sprintf srand strchr strcmp strerror strlen strncmp strncpy strrchr strstr toupper vfprintf wcscpy

user32

MessageBoxW wsprintfA

ws2_32

inet_ntoa

Name

.text

Size

594KB

Virtual Size

594KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

384KB

Virtual Size

384KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

123KB

Virtual Size

123KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

1024B

Virtual Size

555B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1024B

Virtual Size

712B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer