General

  • Target

    Fiddler Triage Pyinstaller shit.zip

  • Size

    9.8MB

  • MD5

    d74316e7c7bb248880a6d3349fd27fcf

  • SHA1

    639c91ac359884fe9cb6d41ef2171491f47bff40

  • SHA256

    7372d669599c35de6b4bf6a158a947ae49e8a3a56742f9f3948be7d6d75e9172

  • SHA512

    418b0e96155386cef61d666bbac37eb10b092dfd3f0abe6ac848ae11fa87eeccf2057b02724f70ecef65a5a3229052d98ba2d92aced8dad82c4ffd033b7a8404

  • SSDEEP

    196608:G83Kl3QHFPGsGvoZhtbTEJji85s1tcICfiDs4ptQR6fCjt8F3bJ8XgJN:mBnubAi83ViDsRR6fCx8f8kN

Score
3/10

Malware Config

Signatures

  • Unsigned PE 21 IoCs

    Checks for missing Authenticode signature.

Files

  • Fiddler Triage Pyinstaller shit.zip
    .zip
  • FiddlerSetup.5.0.20245.10105-latest.exe
    .exe windows:4 windows x86 arch:x86

    f4639a0b3116c2cfc71144b88a929cfd


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FiddlerSetup.exe
    .exe windows:4 windows x86 arch:x86

    9dda1a1d1f8a1d13ae0297b47046b26e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • Analytics.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Analytics.pdb
  • App.ico
  • Be.Windows.Forms.HexBox.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Countdown.wav
  • DotNetZip.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • EnableLoopback.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • EnableLoopback.pdb
  • ExecAction.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • FSE2.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Fiddler.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • Fiddler.exe.config
  • Fiddler.pdb
  • ForceCPU.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • GA.Analytics.Monitor.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • GA.Analytics.Monitor.pdb
  • ImportExport/BasicFormats.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ImportExport/BasicFormats.pdb
  • ImportExport/VSWebTestExport.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ImportExport/VSWebTestExport.pdb
  • Inspectors/QWhale.Common.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Inspectors/QWhale.Editor.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Inspectors/QWhale.Syntax.Schemes.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Inspectors/QWhale.Syntax.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Inspectors/Standard.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Inspectors/SyntaxView.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • LoadScript.wav
  • LoadScriptError.wav
  • NOTICES.txt
  • Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Plugins/NetworkConnections/Telerik.NetworkConnections.Windows.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ResponseTemplates/200_FiddlerGif.dat
  • ResponseTemplates/200_SimpleHTML.dat
  • ResponseTemplates/200_TransPixel.dat
  • ResponseTemplates/204_NoContent.dat
  • ResponseTemplates/302_Redirect.dat
  • ResponseTemplates/303_RedirectWithGet.dat
  • ResponseTemplates/304_NotModified.dat
  • ResponseTemplates/307_RedirectWithMethod.dat
  • ResponseTemplates/401_AuthBasic.dat
  • ResponseTemplates/401_AuthDigest.dat
  • ResponseTemplates/403_AuthDeny.dat
  • ResponseTemplates/404_Plain.dat
  • ResponseTemplates/407_ProxyAuthBasic.dat
  • ResponseTemplates/502_Unreachable.dat
  • RunNsisUninstallers.bat
  • Screenshot.wav
  • ScriptEditor/Analytics.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ScriptEditor/Analytics.pdb
  • ScriptEditor/FSE2.exe.config
  • ScriptEditor/GA.Analytics.Monitor.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ScriptEditor/GA.Analytics.Monitor.pdb
  • ScriptEditor/QWhale.Common.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • ScriptEditor/QWhale.Editor.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • ScriptEditor/QWhale.Syntax.Parsers.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • ScriptEditor/QWhale.Syntax.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Scripts/FiddlerOrchestra.Addon.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Scripts/FiddlerOrchestra.Addon.pdb
  • Scripts/FiddlerOrchestra.Connection.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Scripts/FiddlerOrchestra.Protocol.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Scripts/FiddlerOrchestra.Utilities.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Scripts/QWhale.Common.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Scripts/QWhale.Editor.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Scripts/QWhale.Syntax.Parsers.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Scripts/QWhale.Syntax.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Scripts/RulesTab2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Scripts/SampleRules.cs
  • Scripts/SampleRules.js
    .js
  • Scripts/SimpleFilter.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Scripts/SimpleFilter.pdb
  • Scripts/Timeline.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Scripts/Timeline.pdb
  • Scripts/netstandard.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SetupHelper
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • Telerik.NetworkConnections.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Tools/Brotli.exe
    .exe windows:4 windows x86 arch:x86

    abde5b16095d3ba52da82b2720c99f51


    Headers

    Imports

    Sections

  • Tools/JXR2PNG.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • Tools/JXR2PNG.exe.config
    .xml
  • Tools/PngDistill.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • Tools/PngDistill.pdb
  • Tools/Zopfli.exe
    .exe windows:5 windows x86 arch:x86

    0ee9b066fb0acca861b061bc6205cb49


    Code Sign

    Headers

    Imports

    Sections

  • Tools/dwebp.exe
    .exe windows:5 windows x86 arch:x86

    2d085d0bc738a6c295d68bd5aed725a8


    Headers

    Imports

    Sections

  • TrustCert.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • TrustCert.pdb
  • credits.txt
  • license.txt
  • makecert.exe
    .exe windows:6 windows x86 arch:x86

    8edc201d42ea718d1e65bb5d3125c066


    Code Sign

    Headers

    Imports

    Sections

  • saz.ico
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    f4639a0b3116c2cfc71144b88a929cfd


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • script.zip
    .zip
  • Qt5Concurrent.dll
    .dll windows:6 windows x64 arch:x64

    a6d359db9d425cd97b997335b16fabe8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Core.dll
    .dll windows:6 windows x64 arch:x64

    e8a373955db6ba04b088bbc9903bb82f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Script.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • bin/d3dcompiler_43.dll
    .dll windows:6 windows x86 arch:x86

    6ba7b0e4e74a8eea96dca4fffc88b859


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/libEGL.dll
    .dll windows:5 windows x64 arch:x64

    cbe70f7d9d10cd8df377e2bdaae30384


    Headers

    Imports

    Exports

    Sections

  • bin/libcrypto-1_1-x64.dll
    .dll windows:6 windows x64 arch:x64

    9e838455ae7ea799f93ad26b13f1cafa


    Headers

    Imports

    Exports

    Sections

  • bin/settings.dat
  • bin/tbb12.dll
    .dll windows:6 windows x64 arch:x64

    352dee577dba5dbc88c1bf063a46f2d6


    Code Sign

    Headers

    Imports

    Exports

    Sections