Mass-Report-Tool-main[.]zip

resource	yara_rule
static1/unpack001/Mass-Report-Tool-main/Mass Report Tool.exe	pyinstaller

resource
unpack001/Mass-Report-Tool-main/Mass Report Tool.exe

Mass-Report-Tool-main.zip

SHA256 ac9ddf783bd315a95876472ab6d3fcf6e61454c9329c88dcbf277116cce4768c
MD5 464a015461c25e25235fdadf453e4ecc
SHA1 1cff7fd27eba0e361d2d345b981c74e21eba6f79
SHA512 fb511c2c434addc65e71f1d9bc796075f0279f250821de2374092cd1e311d195b5f3cc93b073c9e70c6894460e8945d1e96d599e5e34e76eed9234fec4eaa7a5
SSDEEP 393216:g8AxQgJANmUaAk+oZ6i4hcStkg59Yu8gpQnN:2Emzxz74hD5Yu8PN
TLSH
T17CD6338EF2FBCAE92D86D4117B7613681C828FD5BB6605B91E5F1302FD5F04A2A54703
MD5 SHA1 SHA512 SSDEEP TLSH

Mass-Report-Tool-main/.gitignore

SHA256 1674ac8ed7488af605be80c1f3a20bc1f4c2b47b8549346722948385ffc87e8c
MD5 e5e81fdb76c0774efca175557ac121e5
SHA1 162a8fa2ba96b278a25c677fae36a54bd46c420d
SHA512 a74731191e34235a8c1fa83dfc476753529c962af465fb5cf8ae931fa9e245566d627009d6eb3eca4f8904b927f31b07f8a8de10279f3dae8ddf9cab6cb35edc
TLSH
T17D51E9794239D37613E2219EE9DEB9E0F339955EF344189A40B7988C230E6C1437336E
MD5 SHA1 SHA512 TLSH

Mass-Report-Tool-main/LICENSE

SHA256 9886f8cee914c4ab394bbcc25e86995f274f3e17b7337bc8884261f0ebcd96f4
MD5 2dc99b0b38e89acfc989106b6e8aee46
SHA1 16b7d6c88f71b977e4b9961919798ef109f7c006
SHA512 92db34283fb27aaa69962cdc64c13e260f2abe9ace5ec4b44f9cb184d424e876c4ca7f430db982c897534f5f73c301da36058d4862e311c44c00305fa81dc3aa
TLSH
T1F011791E72514772189B13605574ACD5F23B725F7A5F2A85146DF345233A06CC5FF844
MD5 SHA1 SHA512 TLSH

Mass-Report-Tool-main/Mass Report Tool.exe

IMPHASH a06f302f71edd380da3d5bf4a6d94ebd
SHA256 ab8e3173f35ecfaa2667e074a3010409694bc6b5652bec333ece3f4a1b84f5ba
MD5 45c749e9814cf06545f05eb380bd12b0
SHA1 a63513233fb6f48fd4b23d5ec6ef4ad134058727
SHA512 7bc8d184300ba819cc32895d2e240f3b4a2a64b408f8169180c8c943332ba7ffd3a3d2a2e09e02c4d1bdcbe816587a751d0286b831334de8722d6a6eea893aef
SSDEEP 393216:VgGV2A7N1+TtIiFsZKSHDNsIxK0MQYLki0oQm:VPr1QtIDFHiIJIki0
TLSH
T16DD6332953EB8DFDE1EB523D82E1C22D7691B5332B91C24B477E060A9F674E05829FC1
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Detects Pyinstaller

pyinstaller
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

50048

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

TranslateMessage ShutdownBlockReasonCreate GetWindowThreadProcessId SetWindowLongPtrW GetWindowLongPtrW MsgWaitForMultipleObjects ShowWindow DestroyWindow CreateWindowExW RegisterClassW DefWindowProcW PeekMessageW DispatchMessageW GetMessageW

kernel32

GetTimeZoneInformation GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP GetACP IsValidCodePage GetStringTypeW FormatMessageW GetLastError GetModuleFileNameW LoadLibraryExW SetDllDirectoryW CreateSymbolicLinkW GetProcAddress CreateDirectoryW GetCommandLineW GetEnvironmentVariableW ExpandEnvironmentStringsW DeleteFileW FindClose FindFirstFileW FindNextFileW HeapSize RemoveDirectoryW GetTempPathW CloseHandle QueryPerformanceCounter QueryPerformanceFrequency WaitForSingleObject Sleep GetCurrentProcess GetCurrentProcessId TerminateProcess GetExitCodeProcess CreateProcessW GetStartupInfoW FreeLibrary LocalFree SetConsoleCtrlHandler GetConsoleWindow K32EnumProcessModules K32GetModuleFileNameExW CreateFileW FindFirstFileExW GetFinalPathNameByHandleW MultiByteToWideChar WideCharToMultiByte GetFileAttributesExW HeapReAlloc WriteConsoleW SetEndOfFile GetDriveTypeW IsDebuggerPresent RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead GetModuleHandleW RtlUnwindEx SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree EncodePointer RaiseException RtlPcToFileHeader GetFileInformationByHandle GetFileType PeekNamedPipe SystemTimeToTzSpecificLocalTime FileTimeToSystemTime ReadFile GetFullPathNameW SetStdHandle GetStdHandle WriteFile ExitProcess GetModuleHandleExW GetCommandLineA HeapFree GetConsoleMode ReadConsoleW SetFilePointerEx GetConsoleOutputCP GetFileSizeEx HeapAlloc FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetCurrentDirectoryW FlushFileBuffers SetEnvironmentVariableW

advapi32

ConvertSidToStringSidW GetTokenInformation OpenProcessToken ConvertStringSecurityDescriptorToSecurityDescriptorW

main.pyc

SHA256 61935f604fba530445a4980de1a4d233a361503e2a5314cf58f126aefb6c3ef9
MD5 7fa556d04eebd1e6bf5ca443f265aa60
SHA1 7f4a0233e5cfe5a5c3b1a0d58a5d47958511f38c
SHA512 38cb77fdcf775b0c70391a60df4067f1b14d52e2dcb885d53f1f51f659d1cdba658be1ffbe5a1678015f2ecdae7270d193de52fa7a9638e72d1ee5d7b9478e2d
SSDEEP 384:SGRmWxFl/KworWvVa7P6orWCUMf8i1cUpdw3o+w:7RmWvVUWvVa7ZW+fGUpd2w
TLSH
T138822D669357D33BE988997500B9FB8B37715AF5B6218343B0FFC0A03F6A2546A460CD
MD5 SHA1 SHA512 SSDEEP TLSH

Mass-Report-Tool-main/README.md

SHA256 425fb590b83089e8d70109edbfc993f3d74ef476e6c66d0a7b04a78cbb6bbe23
MD5 615a309e000feb6f031d5cd255a992b1
SHA1 55e3b6a1e71c5b2310e81abbad534dbb80aafced
SHA512 23374826b747461d01901c03c62b3ddb335e099c4ed683d8c6200eb0d17029d1c807ad717d5aeeb0bbd92c4d7d3ba21ac5108ffa279fca7c6b93544985240d17
TLSH
T18521CBBFA05A79940B521BE3A60CB6FCD303811DE94BC5D5A429403CA31CF6A02F4596
MD5 SHA1 SHA512 TLSH

Mass-Report-Tool-main/config.json

SHA256 957ef104a392eafa14b0b5f78b2661083d1d644ea2c4bc11eb56a0c50c906f6a
MD5 444499716f704dc9c88bdf8b36be1de8
SHA1 3da76a564cc4a869093d72252b8ed65d100cd696
SHA512 e4be3e2fa13f5ca4aafa4809adf44c800e0ec59405989c80b37e9cc8337e91e8b3f17f5fdada893e59611a0acb9f7c804f5647e9136aaf77b864b4d1faddbab2
MD5 SHA1 SHA512

Mass-Report-Tool-main/image1.png

SHA256 7bd311e467dfaafb1e171bba5bba3f8f1c7bce14906937d4d4780b412973a7d4
MD5 2755b08875deb2b33d13717dcc57d1a1
SHA1 6661e870e052c270ca5bf3d3f82bdbbf14a5e6f4
SHA512 30baa72a9365fd2182cc85eeb2c07121aceecfa5c8d242802bff872b89e344fd0f0c9bffaec0ed5031b877bc1ad12d38f6ca2d2465c5139e027b56ac0ebb81d4
SSDEEP 768:ETvAzwQjjjYv1BjjjLjjjsVAjjjrK2Xjjj2jjj7GfEdjjjjjjjjjjjjjjjjjjjj2:+vlR9SrMgRCnsJh5rtULD0noNUYf43kd
TLSH
T125235C49E9328098ED1CA63F0ECBAF31B76927444994C316B535E60DDBDB6BF4C4A4C8
MD5 SHA1 SHA512 SSDEEP TLSH

Mass-Report-Tool-main/image2.png

SHA256 4d74838b07d2de1867e2f4d9e43a0c8f0c89964bbba12567e5de84c3e6432fdc
MD5 edf7cec6b7c8595fd3ddabb3945984e3
SHA1 1ae1dc44bbb0a53bb465ec59442f481815360b30
SHA512 e7594e55ab688c913ce8a08921bcfcb8dfa5c2d6cd58be9d72ee914876222efdefdb23165df74ac555ef876753d3e500dcb65e0c1b5f7e0f0212e5e1d2b5c157
SSDEEP 1536:LvlR9SrMgRCnsJh5rtUYTGyOzLJOdBXST:NS7CsJh5OYT3OzL/T
TLSH
T13F43AF0ADA3644ECFC2CD7360ACB5F3537204B196944832BAA75E50BEF676FB5C48984
MD5 SHA1 SHA512 SSDEEP TLSH

Mass-Report-Tool-main/main.py

SHA256 796a4dc9c1ddba6bd05b8c83d1fb2f87c9d53a9720b187d54955efca74e6f897
MD5 d7e1e125e3b71f97d98dda47c3ec3555
SHA1 e342e2f642ae1803f244106bb4af7bd04d7156d2
SHA512 b818c4da6f8563ed6a7d23a64ba8e7eb30e964b21c06c696807faad40a945949fd76f36591287a53b861e26e0bfcd62f85128f66b757409fbfa8fcdf1f18fc42
SSDEEP 192:vvxBrCBOWA5B0b7eeCHfoB5bGRZf4kXEb5DmrAyzoyIdPvjUVh2h5JhU1eht5dRn:RBVTz02zHfoBVGR5XEb5Tp
TLSH
T173B3BB95B2186B8980271626FEB86E7BCEF17F3FDD15D2D3812C9EB0B57C1219E21418
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer