fresh malwares.zip
- SHA256 99a8e6ecf9bbea7d906e154d5fc699051645d5efc3c6319a2b45513f64589efc
Password
perfect
Overview
overview
10Static
static
10Key Generator.exe
windows10-2004-x64
7Key Generator.exe
windows11-21h2-x64
7BitcoinGenerator.exe
windows10-2004-x64
10BitcoinGenerator.exe
windows11-21h2-x64
10LoL Hack &...ks.exe
windows10-2004-x64
10LoL Hack &...ks.exe
windows11-21h2-x64
10Welrast_64.exe
windows10-2004-x64
7Welrast_64.exe
windows11-21h2-x64
7Behavioral task
behavioral1
Sample
Key Generator.exe
Resource
win10v2004-20250610-en
windows10-2004-x64
7 signatures
900 seconds
Behavioral task
behavioral2
Sample
Key Generator.exe
Resource
win11-20250619-en
windows11-21h2-x64
9 signatures
900 seconds
Behavioral task
behavioral3
Sample
BitcoinGenerator.exe
Resource
win10v2004-20250610-en
windows10-2004-x64
10 signatures
900 seconds
Behavioral task
behavioral4
Sample
BitcoinGenerator.exe
Resource
win11-20250619-en
windows11-21h2-x64
9 signatures
900 seconds
Behavioral task
behavioral5
Sample
LoL Hack & Cheat Map Hacks/LoL Hack & Cheat Map Hacks.exe
Resource
win10v2004-20250619-en
windows10-2004-x64
9 signatures
900 seconds
Behavioral task
behavioral6
Sample
LoL Hack & Cheat Map Hacks/LoL Hack & Cheat Map Hacks.exe
Resource
win11-20250619-en
windows11-21h2-x64
9 signatures
900 seconds
Behavioral task
behavioral7
Sample
Welrast_64.exe
Resource
win10v2004-20250502-en
windows10-2004-x64
12 signatures
900 seconds
Behavioral task
behavioral8
Sample
Welrast_64.exe
Resource
win11-20250610-en
windows11-21h2-x64
11 signatures
900 seconds
General
- Target fresh malwares.zip
- Size 41.6MB
- Sample251007-yd535askz3
- SHA256 99a8e6ecf9bbea7d906e154d5fc699051645d5efc3c6319a2b45513f64589efc
- MD5 0c9ea5b76061769a4150f8fcade9c8c7
- SHA1 1e2545122b2bf971f97bc74382690b908c967593
- SHA512 bfd95a97e1751fbef3bf3784a69e5bc92d7c3b19a75877f2d108374b600df80e887de9657981e5a55fe674a2fcfb37688cd1797187dca2803c3ea7569afe3172
- SSDEEP 786432:z6Ab8GCqBzMenSALj711TS4LUQ2ke4EIEeJnNc7VjeZOe7VW22F0q61ab:h8G3BdnSALPFQQtfueBIjNWW2zqIab
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Extracted
Family
-
limerat
Wallets
-
1MQLGFqwsmwXELfrdBw6kXkr3GgpfQzW4m
Attributes
-
aes_key
NYANCAT
-
antivm
false
-
c2_url
https://pastebin.com/raw/DDTVwwbu
-
delay
3
-
download_payload
false
-
install
true
-
install_name
system.exe
-
main_folder
AppData
-
pin_spread
true
-
sub_folder
\
-
usb_spread
true
Signatures
- Limerat family
- Njrat family
- Codesign digest Mismatch 1 IoCs
File was altered after it was signed.
resource unpack009/Welrast_64.exe - Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack002/Key Generator.exe unpack004/BitcoinGenerator.exe unpack006/LoL Hack & Cheat Map Hacks/LoL Hack & Cheat Map Hacks.exe - NSIS installer 2 IoCs
resource yara_rule static1/unpack009/Welrast_64.exe nsis_installer_1 static1/unpack009/Welrast_64.exe nsis_installer_2
File Explorer
-
fresh malwares.zip.zip 41.6MB
-
Perfect-Malware-Samples-master/Backdoors/Backdoor MSILBladabindi.BT!bit.7z.7z 23.7MB
-
Key Generator.exe.exe 31.1MB
-
Perfect-Malware-Samples-master/Backdoors/backdoorwin32-limerat.yamtb.7z.7z 18KB
-
BitcoinGenerator.exe.exe 190KB
-
Perfect-Malware-Samples-master/README.md2KB
-
Perfect-Malware-Samples-master/Trojans/TrojanWin32 Fuerboos.C!cl.7z.7z 8.4MB
-
LoL Hack & Cheat Map Hacks/1.png.png 1.4MB
-
LoL Hack & Cheat Map Hacks/LoL Hack & Cheat Map Hacks.exe.exe 7.1MB
-
LoL Hack & Cheat Map Hacks/READMY.txt1KB
-
Perfect-Malware-Samples-master/Trojans/TrojanWin32 Occamy.C.7z.7z 2.7MB
-
Welrast_64.exe.exe 2.7MB
-
Perfect-Malware-Samples-master/Trojans/TrojanWin32 Predator.J!MTB.7z.7z 113KB
-
Perfect-Malware-Samples-master/Trojans/TrojanWin32 Spursint.F!cl.7z.7z 3.8MB
-
Perfect-Malware-Samples-master/Trojans/TrojanWin32 Tiggre!plock.7z.7z 1.3MB
-
Perfect-Malware-Samples-master/Trojans/TrojanWin32 Wacatac.A!ml.7z.7z 710KB
-
Perfect-Malware-Samples-master/Wall of Shame/hacktool.cryptodoubler.7z.7z 346KB
-
Perfect-Malware-Samples-master/Worms/HEUR Worm.Script.Generic.7z.7z 7KB
-
Perfect-Malware-Samples-master/images/graph.png.png 29KB
-
Perfect-Malware-Samples-master/images/mainlogo.png.png 494KB
Perfect-Malware-Samples-master/Backdoors/Backdoor MSILBladabindi.BT!bit.7z
- SHA256 0dec66b1a3ac75cae41d91cfc4f25616590e25fefe3106166e272748b60a9ca4
- MD5 1c7e7f468f051890e52281b9bd08f1e4
- SHA1 d3d94840f096d07c6e14c7b2a694267425e471e9
- SHA512 da8bde9123f275053718e51de749d8596ece074fefc35a8338b840bbb3d78d120fa97ea8e28b9baca34ba1ad0070d9b13d48a1a8a602b7ce807f4e588cd5f18e
- SSDEEP 393216:i6Uxb1SGCq1FPRhAcMenLeAVHpOUSxnLC/91CSSIrHrUe30fYeYLdsxmO:i6Ab8GCqBzMenSALj711TS4LUQ2keN
- MD5 SHA1 SHA512 SSDEEP
Password
perfect
Key Generator.exe
- IMPHASH cd74c16e19de02339ba1d593de4c426e
- SHA256 52ef16c62ea7ef46c2187a08cf618d989a514bdab8e452777fc76f57d45ba033
- MD5 7331003634b9ba117fdc644911c1983f
- SHA1 23a86779b0c77991f21ad93595209e2c502296af
- SHA512 cd6ebe9f2763662adb896b38d089f7d9c936acbf22c291ed83c7691b1bfbb07dd4e0387dbe84e1f302c74b23bb94e7e00843bf86040bb4ab3e2e69133472961b
- SSDEEP 49152:fkZQiO0OSf4t9KVsC2kd+z/kHcPO6FVSOzdtoe3bxqsfrFuWrFuYTX8uTMdCn69e:fkZQb
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
perfect
Minor OS version
0
Major OS version
4
Entry point
4252
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
msvbvm60
ord666
ord594
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord713
ord606
ord716
ProcCallEngine
ord537
ord570
ord100
ord617
ord619
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
732B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
56KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=13, version=8169,
Perfect-Malware-Samples-master/Backdoors/backdoorwin32-limerat.yamtb.7z
- SHA256 159d208aa3726c213003ba764d6473f3eaedd1018b826f1951769da022d9ea9a
- MD5 fdd963df3428de73609d2395f50d4499
- SHA1 f25b2e92da8bd657c2fab9e36684793289a9590e
- SHA512 cb09bd3551a9acb5e0f70458ed5115c48636b0d110e464c96c5934e98e51e87d688d479c7aa24e6d8ab440ba8c191fb24bea53699cb5bc0b8f592fb7db0bfec8
- SSDEEP 384:3edH43S6gp6f38BiaAnPqivK5m+zGJdm9BwXjQwlsjTToja:3sY3SHp6KZ9Jo+6IiraPx
- MD5 SHA1 SHA512 SSDEEP
Password
perfect
BitcoinGenerator.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 515cb7f19d5273972f71c0f25c8ea05f0bba3608efd9b8db0734f9214cc18518
- MD5 6cfd4dc0100a9f5cb26664cdce5bc696
- SHA1 0d2b1999e77c4753093fb61a4ea3ee950d849caf
- SHA512 295277d489e35527a18bc376c4b43064ddbfc0abad0bb6093b2a5b5480432f21512fa67e88795611c757a28600f8cbb8460f703c82426f55b93edd81f737ef4a
- SSDEEP 768:LxSquilVDHC5zJok5NuwOlhmXRYsbvDvFZt:L1uilVDgJD6wOlhqf/NZ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
perfect
Minor OS version
0
Major OS version
4
Entry point
35950
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
162KB
Virtual Size
161KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Perfect-Malware-Samples-master/README.md
- SHA256 5cd47be76e856110432dfff75ed1abf5a4e07324f3c127935b2ab34674cfe23f
- MD5 0449e7e82c10139d10b9407d4c667ac0
- SHA1 002507c53e76366d0aa3242c593dcc10f77ca330
- SHA512 e69d8d7a314e1d131e63ec686b6fd863133caefbad483cd07b3de5b4f356418759091a2905698e018e5a1cd61e69afd6e34d684557fa51000c1db3a9aa2809d4
- MD5 SHA1 SHA512
Perfect-Malware-Samples-master/Trojans/TrojanWin32 Fuerboos.C!cl.7z
- SHA256 8c889e0aa50c5ed1b05658afa302c4001c18d784100e312f2962fac72e572b38
- MD5 1ad2165d24fd5ec578eb4d7faafb9d00
- SHA1 fda3bc4585aaa73e02dd5ca7336a5802f343bcc6
- SHA512 847890d3512164ccf6a1ef0c951aaca5396217be377e8cb3acfbf0750e84e14880d3117961af1cb4e7c5be994df7e261350a6eb4ef031a429344577ad7f973cf
- SSDEEP 196608:oYER2IjLEc+WeJsMmo+UySPoSvyWTr3h1B+xM0Gulx92:5ER2blWeJsM1Xl+x1pH92
- MD5 SHA1 SHA512 SSDEEP
Password
perfect
LoL Hack & Cheat Map Hacks/1.png
- SHA256 5963847b5a8041d1799e71571f6a5ce8ef4112b2c49a5b3679e90859ee94e8bf
- MD5 990f5528d915f550d04e089a5f0306f9
- SHA1 8e3443e9494bd582e76dc7482b7ce1a106dae538
- SHA512 2b9107007b0b93f5d0a60bc9cd532a0d4b21fd46ba2af3d0cde2e781b9ad88d3cb249ed40ea4fc4aa0c969535173b1571875c9ab8f4eb97d4e7e884ca171ad96
- SSDEEP 24576:tCHsM4BuCObKG4/DQemJ6GyG5oKFfZsY7u80+I2zv/pK3V3ZM:tCQY5KR0LO1aSYS+I4/MFJM
- MD5 SHA1 SHA512 SSDEEP
Password
perfect
LoL Hack & Cheat Map Hacks/LoL Hack & Cheat Map Hacks.exe
- IMPHASH 2eabe9054cad5152567f0699947a2c5b
- SHA256 526661e4af659fca98177bfa6e13a215efd33fa8808cc9cf980737c6b37e4d89
- MD5 e4aa7889df0115691dc33101d6bda140
- SHA1 aa54c090b749f01af7277955eb79ec24d25792d8
- SHA512 5cb41439bbfcfb8ec05d63fefd70f42ffa3596aae97f2764d4b3aaee1595010ec7c96a9fdce55e93631c3026e936783c68e4e5cffdef68156d29050453228356
- SSDEEP 196608:STm418Sqz/O1oINJC1vmWjytfU8g0+sKvr:STm08nz/O1oINJCFjyrx+Hr
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
perfect
Minor OS version
0
Major OS version
4
Entry point
16502784
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
kernel32
lstrcpy
Name
Size
50KB
Virtual Size
116KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
512B
Virtual Size
8.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
rqpvaxvd
Size
7.0MB
Virtual Size
7.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
lcmiqcvm
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.taggant
Size
8KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
LoL Hack & Cheat Map Hacks/READMY.txt
- SHA256 783b5148f0636f89caa61ea22be2003c0f9afb7fb8f2a88f89b087d9efebbd83
- MD5 268381ab69b85369f404e49a9291ce1c
- SHA1 76fe61825565dc1ac7b654145378c944bd7d6d7d
- SHA512 c7393036cc701fd2c66f1f2579adc2fb084c2672cfb64bedc22b787ecfc9af0340adc105f7923b986ded3a331386b172bdd50d5b99fbd85c818d54e756de4a85
- MD5 SHA1 SHA512
Perfect-Malware-Samples-master/Trojans/TrojanWin32 Occamy.C.7z
- SHA256 f1ed060f21cd2c7f276ed00e16e80a55cb7abdb4aa0d87fc7b2791607b20070f
- MD5 211091126642fc64ed27785b67fbbc00
- SHA1 c54f732aed358efeff4344797abf0789e6e55ef5
- SHA512 616680ede3b6907384c8cef965f35ee006376cccf8e80bb3ec9c18f4ddc747e86e70ded4eadd485df19abbf9cce3ace1b1dff4b7b734772f74e1fcb447cc39c0
- SSDEEP 49152:KjTdDbRDXB5xhzIU/ZOOEBtlhtjn3Gdt7jJGyiQbdhaD1xakiFJ5hpylKXvZAza6:KFBrB5Dka7EBtztjn3Ct0yiQbSxUk8Ji
- MD5 SHA1 SHA512 SSDEEP
Password
perfect
Welrast_64.exe
- IMPHASH 3abe302b6d9a1256e6a915429af4ffd2
- SHA256 123423017a860591694b92eaf14eb3b633d80899c00b0d34d525469e79e6c340
- MD5 49853690ee7cbec3703fcd75b06d7ce3
- SHA1 2d150763434a61c39634769e7563211e040fc0fe
- SHA512 5b993c40965c2df9ffd5eccb0e4e3fea0a24e001775bb1ddfd0a62826f12166843f49200fb766787f17fca64253904cd901b4030137a8033da055cb8b3dada9d
- SSDEEP 49152:oLGgjkiZrCiximtlVwcOSgEbTehBjHsYrNN2TF6wk8TAnXk/U:oHkiZrHTVw77yeffAPk8Sks
- MD5 SHA1 SHA512 SSDEEP
-
Codesign digest Mismatch
File was altered after it was signed.
-
NSIS installer
PE Signature issue
Digest
e0:a9:87:56:b9:e1:4e:29:fe:54:af:4c:f1:46:3f:1b:8d:13:da:83
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Mozilla Corporation,O=Mozilla Corporation,L=Mountain View,ST=California,C=US
Chains
Jun 21, 2018
CN=Mozilla Corporation,O=Mozilla Corporation,L=Mountain View,ST=California,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Mozilla Corporation,O=Mozilla Corporation,L=Mountain View,ST=California,C=US
Serial Number
0c:53:96:dc:b2:94:9c:70:fa:c4:8a:b0:8a:07:33:8e
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 23, 2017 - Jun 28, 2019
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Minor OS version
0
Major OS version
4
Entry point
12812
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
GetTempPathA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetEnvironmentVariableA
Sleep
GetTickCount
GetCommandLineA
lstrlenA
GetVersion
SetErrorMode
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GetWindowsDirectoryA
SetCurrentDirectoryA
GetLastError
CreateDirectoryA
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
ReadFile
WriteFile
lstrcpyA
MoveFileExA
lstrcatA
GetSystemDirectoryA
GetProcAddress
GetExitCodeProcess
WaitForSingleObject
CompareFileTime
SetFileAttributesA
GetFileAttributesA
GetShortPathNameA
MoveFileA
GetFullPathNameA
SetFileTime
SearchPathA
CloseHandle
lstrcmpiA
CreateThread
GlobalLock
lstrcmpA
FindFirstFileA
FindNextFileA
DeleteFileA
SetFilePointer
GetPrivateProfileStringA
FindClose
MultiByteToWideChar
FreeLibrary
MulDiv
WritePrivateProfileStringA
LoadLibraryExA
GetModuleHandleA
GlobalAlloc
GlobalFree
ExpandEnvironmentStringsA
user32
ScreenToClient
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
PostQuitMessage
GetWindowRect
EnableMenuItem
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
ReleaseDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndDialog
RegisterClassA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
ExitWindowsEx
GetDC
CreateDialogParamA
SetTimer
GetDlgItem
SetWindowLongA
SetForegroundWindow
LoadImageA
IsWindow
SendMessageTimeoutA
FindWindowExA
OpenClipboard
TrackPopupMenu
AppendMenuA
EndPaint
DestroyWindow
wsprintfA
ShowWindow
SetWindowTextA
gdi32
SelectObject
SetBkMode
CreateFontIndirectA
SetTextColor
DeleteObject
GetDeviceCaps
CreateBrushIndirect
SetBkColor
shell32
SHGetSpecialFolderLocation
ShellExecuteExA
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
SHFileOperationA
advapi32
AdjustTokenPrivileges
RegCreateKeyExA
RegOpenKeyExA
SetFileSecurityA
OpenProcessToken
LookupPrivilegeValueA
RegEnumValueA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegEnumKeyA
comctl32
ImageList_Create
ImageList_AddMasked
ImageList_Destroy
ord17
ole32
OleUninitialize
OleInitialize
CoTaskMemFree
CoCreateInstance
Name
.text
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
149KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=159, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Perfect-Malware-Samples-master/Trojans/TrojanWin32 Predator.J!MTB.7z
- SHA256 f9a84a3a6492ab46c3e64e7c14071d693028ba7e71319c4664eadae7a076be21
- MD5 4cde997b0f74bb3623810789c7b87ab6
- SHA1 37e4b620d42046d4d0d4bfdc26d48b88eeb28615
- SHA512 da2f754ad6295740edbd240cab043542f65567182e72aa19deda97d2b63feb18fd285dd36228ca793a0d00a9a5b50460e720b0715ca45d45f50922fe00348e27
- SSDEEP 3072:AO0CJ0ARC3znPNfUiNkw1LZPTHdq2MHKL/O39V:RRC3LPCiNjLZPTHdq4zOr
- MD5 SHA1 SHA512 SSDEEP
Perfect-Malware-Samples-master/Trojans/TrojanWin32 Spursint.F!cl.7z
- SHA256 734ceb637b21c3f27897716c151be3eff1bf0c95702f3a9d83c0ca753b96ebc8
- MD5 961e31799a48dca3b22177e4717371a4
- SHA1 686cfd51ed9aa780ceb450334f0e63d221f39fee
- SHA512 7d3ce643934b49a79ca886cf680bb7935e9c4ccfcd4df6b75acf63c6ae0071cf3dc12b830b825a53fac0bc0b95cbfce59d6c22b51fb0d90d6f4f2c3c3869f266
- SSDEEP 98304:Hm3SQYDWKP/U6HEV6WCNltvHOhFYZIR3l4SSlk:ySQbKPs6HEwWCtEiuBl49e
- MD5 SHA1 SHA512 SSDEEP
Perfect-Malware-Samples-master/Trojans/TrojanWin32 Tiggre!plock.7z
- SHA256 95f95fae6c1325fd4842f05d12210083aa5b4d28b13b6e13123fbc866beaf538
- MD5 d64023c6d51a82f059461574669b2a84
- SHA1 eca98df1ae73a809b54c3bc64a1b2193ac2fe9e8
- SHA512 1335e4161c04059d08bb9d81df8cfd67cb7826cdaf02eb045399a61b2345d4bfd994a1b8ef217cbdc60475c2204949f8cee65e2393c955f9fc0d5195f82593b9
- SSDEEP 24576:yMTkVEDbbQaEa7qp/A4oD+jrTnKm8bZmooSfkzy1/R05yshJpIChimQN1UcScQIJ:JTkVNa0p/A4naFVmoou1/R0Esrp9wN1X
- MD5 SHA1 SHA512 SSDEEP
Perfect-Malware-Samples-master/Trojans/TrojanWin32 Wacatac.A!ml.7z
- SHA256 8085469c8e17c0523b91fcadadbcac9c0a3c7643fcb935d6fa33b1aa2c5cd983
- MD5 af19d2698c332087d8cb1056a52a8c21
- SHA1 ad279552c773a4b04a25cf667b917903825f6ed8
- SHA512 2021d35fcdb082f51fb3347befd75a392a2dbe91329ad8e0dac31a35fa7a56156700ccde7818d56ace882305b04d7091bc85dab44ac8a4a0129b5998cb5244d0
- SSDEEP 12288:J82o/C8W9Idct9Y1DYqKX9NA+NWw9eGA5ty724vGY+9ciei5AK5gqJZ9ckOb3ZGi:S2cU9Idct9Y1cqkNAWWw9eGA3BY+eie7
- MD5 SHA1 SHA512 SSDEEP
Perfect-Malware-Samples-master/Wall of Shame/hacktool.cryptodoubler.7z
- SHA256 29441fe3eb30afa8c664d95ca6466dc7de88713643f6793d4679b42848f238f5
- MD5 7d1f50c0e195cbb338ca63be720f3d3d
- SHA1 7124eb6bd0e2e3cb809074f767bdaea3d47ba792
- SHA512 75af0d6231b81a2bd1504035f3c8497a133e8ccb3dd98756b6baea1fd36e813bc9e73667807f7e25f959598bfdb91f770bf32870ef8baf10c4334586e36ff27b
- SSDEEP 6144:3yCnxunOGLkb+B6JlKy29crOBzSlOIy0FjRNrwE8VHQZDMMkx+ImcC4v8WkH3d3w:CYxMOaY+BGKy29vNSRNrwjHq6x9dC40M
- MD5 SHA1 SHA512 SSDEEP
Perfect-Malware-Samples-master/Worms/HEUR Worm.Script.Generic.7z
- SHA256 823a313dcb80c6684fd22b6a1666240cf0e4612ddaab1bdb3ed9d0afd152e9a0
- MD5 690c1bd053ebb579bcbffcff744ae129
- SHA1 9eb131971103c0f7ac3a41d703cb90ae0c59de10
- SHA512 705e9d27021130108a5416da25f8601b041959f136c09580cb13af0349533eec2d4818ecaf82edc3e6dc4b06c55bb9d72c59b90cd416edbfdf25a32a44f04815
- SSDEEP 192:V9W/BKQAdbbGK8FQfL88ron9N/mDbVjuG92:VOBKtbGK8+j2QjuP
- MD5 SHA1 SHA512 SSDEEP
Perfect-Malware-Samples-master/images/graph.png
- SHA256 78a8635108c0873daab9d65c5483b85bd836e2575e4f18fd7f0288e1ca66c92c
- MD5 4d392121ffa2c5399debd208112e738f
- SHA1 f1ff8820451c6d63d7bcd21437fddabdaec26b46
- SHA512 32056e979cb1784168a70d8ade25945ea4cee6408383578448753716bc157d5285b57cd022160cb1fa82ce8f925f623327a0fef922bc65286b49b9630d77a0fc
- SSDEEP 768:SqU0dT3alHYeNtX/VGAq5uvpoDX4x+p4NiTvqArpZVTyd5d5:SOdqlND9Pq5uvp0XaUhrBWn
- MD5 SHA1 SHA512 SSDEEP
Perfect-Malware-Samples-master/images/mainlogo.png
- SHA256 c06e13a7d16ca854d2ecac80cc8e33b96440b0fe769a2f590bd78915d4a29377
- MD5 5a84904e211357661971dfbffd9b164a
- SHA1 a970b0adfddc1eb0079546614b996be7b86058a9
- SHA512 54978ceb501d43ebbc91c6c19a247327ac7e59b498f4fd711b3d08769dbe821ac10689dc24f28a923d7c9d5eca7f3bd3a25c5555f5aeae5f61783d1327f2bfc0
- SSDEEP 12288:bjf9/lxdnqEBBKMWMesRRN+O2Ml427nFlq9xTM1:bD9NrKGLf2Ml427nPq41
- MD5 SHA1 SHA512 SSDEEP