General

  • Target
    DrawBot.zip
  • Size 32.2MB
  • Sample260801-xjs53stfph
  • SHA256 3b1fa4d6b9318b717472753772fdbff5d8d7ec43d1e67f80d479ae15e62f66ff
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • DrawBot.zip
    .zip 32.2MB
  • DrawBot/DrawBot.exe
    .exe 3.3MB
  • app.pyc
    12KB
  • drawbot.pyc
    4KB
  • utils.pyc
    1KB
  • DrawBot/DrawBot.exe.manifest
    .xml 1KB
  • DrawBot/Include/pyconfig.h
    .bat 20KB
  • DrawBot/MSVCP140.dll
    .dll 443KB
  • DrawBot/MSVCP140_1.dll
    .dll 28KB
  • DrawBot/PIL/_imaging.cp38-win32.pyd
    .dll 2.1MB
  • DrawBot/PIL/_imagingtk.cp38-win32.pyd
    .dll 12KB
  • DrawBot/PIL/_webp.cp38-win32.pyd
    .dll 430KB
  • DrawBot/PyQt5/Qt/plugins/iconengines/qsvgicon.dll
    .dll 34KB
  • DrawBot/PyQt5/Qt/plugins/imageformats/qgif.dll
    .dll 33KB
  • DrawBot/PyQt5/Qt/plugins/imageformats/qicns.dll
    .dll 37KB
  • DrawBot/PyQt5/Qt/plugins/imageformats/qico.dll
    .dll 31KB
  • DrawBot/PyQt5/Qt/plugins/imageformats/qjpeg.dll
    .dll 365KB
  • DrawBot/PyQt5/Qt/plugins/imageformats/qsvg.dll
    .dll 27KB
  • DrawBot/PyQt5/Qt/plugins/imageformats/qtga.dll
    .dll 26KB
  • DrawBot/PyQt5/Qt/plugins/imageformats/qtiff.dll
    .dll 345KB
  • DrawBot/PyQt5/Qt/plugins/imageformats/qwbmp.dll
    .dll 25KB
  • DrawBot/PyQt5/Qt/plugins/imageformats/qwebp.dll
    .dll 402KB
  • DrawBot/PyQt5/Qt/plugins/platforms/qminimal.dll
    .dll 685KB
  • DrawBot/PyQt5/Qt/plugins/platforms/qoffscreen.dll
    .dll 614KB
  • DrawBot/PyQt5/Qt/plugins/platforms/qwebgl.dll
    .dll 397KB
  • DrawBot/PyQt5/Qt/plugins/platforms/qwindows.dll
    .dll 1.2MB
  • DrawBot/PyQt5/Qt/plugins/platformthemes/qxdgdesktopportal.dll
    .dll 52KB
  • DrawBot/PyQt5/Qt/plugins/styles/qwindowsvistastyle.dll
    .dll 129KB
  • DrawBot/PyQt5/Qt/translations/qtbase_ar.qm
    156KB
  • DrawBot/PyQt5/Qt/translations/qtbase_bg.qm
    161KB
  • DrawBot/PyQt5/Qt/translations/qtbase_ca.qm
    205KB
  • DrawBot/PyQt5/Qt/translations/qtbase_cs.qm
    170KB
  • DrawBot/PyQt5/Qt/translations/qtbase_da.qm
    177KB
  • DrawBot/PyQt5/Qt/translations/qtbase_de.qm
    215KB
  • DrawBot/PyQt5/Qt/translations/qtbase_en.qm
    16B
  • DrawBot/PyQt5/Qt/translations/qtbase_es.qm
    161KB
  • DrawBot/PyQt5/Qt/translations/qtbase_fi.qm
    175KB
  • DrawBot/PyQt5/Qt/translations/qtbase_fr.qm
    162KB
  • DrawBot/PyQt5/Qt/translations/qtbase_gd.qm
    185KB
  • DrawBot/PyQt5/Qt/translations/qtbase_he.qm
    135KB
  • DrawBot/PyQt5/Qt/translations/qtbase_hu.qm
    156KB
  • DrawBot/PyQt5/Qt/translations/qtbase_it.qm
    157KB
  • DrawBot/PyQt5/Qt/translations/qtbase_ja.qm
    126KB
  • DrawBot/PyQt5/Qt/translations/qtbase_ko.qm
    153KB
  • DrawBot/PyQt5/Qt/translations/qtbase_lv.qm
    150KB
  • DrawBot/PyQt5/Qt/translations/qtbase_pl.qm
    159KB
  • DrawBot/PyQt5/Qt/translations/qtbase_ru.qm
    198KB
  • DrawBot/PyQt5/Qt/translations/qtbase_sk.qm
    122KB
  • DrawBot/PyQt5/Qt/translations/qtbase_tr.qm
    189KB
  • DrawBot/PyQt5/Qt/translations/qtbase_uk.qm
    154KB
  • DrawBot/PyQt5/Qt/translations/qtbase_zh_TW.qm
    124KB
  • DrawBot/PyQt5/QtCore.pyd
    .dll 1.8MB
  • DrawBot/PyQt5/QtGui.pyd
    .dll 1.9MB
  • DrawBot/PyQt5/QtWidgets.pyd
    .dll 3.7MB
  • DrawBot/PyQt5/QtWinExtras.pyd
    .dll 85KB
  • DrawBot/PyQt5/sip.cp38-win32.pyd
    .dll 101KB
  • DrawBot/Qt5Core.dll
    .dll 5.1MB
  • DrawBot/Qt5DBus.dll
    .dll 336KB
  • DrawBot/Qt5Gui.dll
    .dll 5.6MB
  • DrawBot/Qt5Network.dll
    .dll 1.0MB
  • DrawBot/Qt5Qml.dll
    .dll 2.8MB
  • DrawBot/Qt5QmlModels.dll
    .dll 341KB
  • DrawBot/Qt5Quick.dll
    .dll 3.3MB
  • DrawBot/Qt5Svg.dll
    .dll 257KB
  • DrawBot/Qt5WebSockets.dll
    .dll 119KB
  • DrawBot/Qt5Widgets.dll
    .dll 4.3MB
  • DrawBot/Qt5WinExtras.dll
    .dll 197KB
  • DrawBot/VCRUNTIME140.dll
    .dll 84KB
  • DrawBot/_asyncio.pyd
    .dll 54KB
  • DrawBot/_bz2.pyd
    .dll 72KB
  • DrawBot/_cffi_backend.cp38-win32.pyd
    .dll 143KB
  • DrawBot/_ctypes.pyd
    .dll 109KB
  • DrawBot/_decimal.pyd
    .dll 220KB
  • DrawBot/_hashlib.pyd
    .dll 36KB
  • DrawBot/_lzma.pyd
    .dll 181KB
  • DrawBot/_multiprocessing.pyd
    .dll 24KB
  • DrawBot/_overlapped.pyd
    .dll 37KB
  • DrawBot/_queue.pyd
    .dll 24KB
  • DrawBot/_socket.pyd
    .dll .js 67KB
  • DrawBot/_ssl.pyd
    .dll 108KB
  • DrawBot/base_library.zip
    .zip 768KB
  • _bootlocale.pyc
    1KB
  • _collections_abc.pyc
    28KB
  • _weakrefset.pyc
    7KB
  • abc.pyc
    5KB
  • codecs.pyc
    33KB
  • collections/__init__.pyc
    45KB
  • collections/abc.pyc
    233B
  • copyreg.pyc
    4KB
  • encodings/__init__.pyc
    3KB
  • encodings/aliases.pyc
    6KB
  • encodings/ascii.pyc
    1KB
  • encodings/base64_codec.pyc
    2KB
  • encodings/big5.pyc
    1KB
  • encodings/big5hkscs.pyc
    1KB
  • encodings/bz2_codec.pyc
    3KB
  • encodings/charmap.pyc
    2KB
  • encodings/cp037.pyc
    2KB
  • encodings/cp1006.pyc
    2KB
  • encodings/cp1026.pyc
    2KB
  • encodings/cp1125.pyc
    7KB
  • encodings/cp1140.pyc
    2KB
  • encodings/cp1250.pyc
    2KB
  • encodings/cp1251.pyc
    2KB
  • encodings/cp1252.pyc
    2KB
  • encodings/cp1253.pyc
    2KB
  • encodings/cp1254.pyc
    2KB
  • encodings/cp1255.pyc
    2KB
  • encodings/cp1256.pyc
    2KB
  • encodings/cp1257.pyc
    2KB
  • encodings/cp1258.pyc
    2KB
  • encodings/cp273.pyc
    2KB
  • encodings/cp424.pyc
    2KB
  • encodings/cp437.pyc
    7KB
  • encodings/cp500.pyc
    2KB
  • encodings/cp720.pyc
    2KB
  • encodings/cp737.pyc
    8KB
  • encodings/cp775.pyc
    7KB
  • encodings/cp850.pyc
    7KB
  • encodings/cp852.pyc
    7KB
  • encodings/cp855.pyc
    7KB
  • encodings/cp856.pyc
    2KB
  • encodings/cp857.pyc
    7KB
  • encodings/cp858.pyc
    7KB
  • encodings/cp860.pyc
    7KB
  • encodings/cp861.pyc
    7KB
  • encodings/cp862.pyc
    7KB
  • encodings/cp863.pyc
    7KB
  • encodings/cp864.pyc
    7KB
  • encodings/cp865.pyc
    7KB
  • encodings/cp866.pyc
    8KB
  • encodings/cp869.pyc
    7KB
  • encodings/cp874.pyc
    2KB
  • encodings/cp875.pyc
    2KB
  • encodings/cp932.pyc
    1KB
  • encodings/cp949.pyc
    1KB
  • encodings/cp950.pyc
    1KB
  • encodings/euc_jis_2004.pyc
    1KB
  • encodings/euc_jisx0213.pyc
    1KB
  • encodings/euc_jp.pyc
    1KB
  • encodings/euc_kr.pyc
    1KB
  • encodings/gb18030.pyc
    1KB
  • encodings/gb2312.pyc
    1KB
  • encodings/gbk.pyc
    1KB
  • encodings/hex_codec.pyc
    2KB
  • encodings/hp_roman8.pyc
    2KB
  • encodings/hz.pyc
    1KB
  • encodings/idna.pyc
    5KB
  • encodings/iso2022_jp.pyc
    1KB
  • encodings/iso2022_jp_1.pyc
    1KB
  • encodings/iso2022_jp_2.pyc
    1KB
  • encodings/iso2022_jp_2004.pyc
    1KB
  • encodings/iso2022_jp_3.pyc
    1KB
  • encodings/iso2022_jp_ext.pyc
    1KB
  • encodings/iso2022_kr.pyc
    1KB
  • encodings/iso8859_1.pyc
    2KB
  • encodings/iso8859_10.pyc
    2KB
  • encodings/iso8859_11.pyc
    2KB
  • encodings/iso8859_13.pyc
    2KB
  • encodings/iso8859_14.pyc
    2KB
  • encodings/iso8859_15.pyc
    2KB
  • encodings/iso8859_16.pyc
    2KB
  • encodings/iso8859_2.pyc
    2KB
  • encodings/iso8859_3.pyc
    2KB
  • encodings/iso8859_4.pyc
    2KB
  • encodings/iso8859_5.pyc
    2KB
  • encodings/iso8859_6.pyc
    2KB
  • encodings/iso8859_7.pyc
    2KB
  • encodings/iso8859_8.pyc
    2KB
  • encodings/iso8859_9.pyc
    2KB
  • encodings/johab.pyc
    1KB
  • encodings/koi8_r.pyc
    2KB
  • encodings/koi8_t.pyc
    2KB
  • encodings/koi8_u.pyc
    2KB
  • encodings/kz1048.pyc
    2KB
  • encodings/latin_1.pyc
    1KB
  • encodings/mac_arabic.pyc
    7KB
  • encodings/mac_centeuro.pyc
    2KB
  • encodings/mac_croatian.pyc
    2KB
  • encodings/mac_cyrillic.pyc
    2KB
  • encodings/mac_farsi.pyc
    2KB
  • encodings/mac_greek.pyc
    2KB
  • encodings/mac_iceland.pyc
    2KB
  • encodings/mac_latin2.pyc
    2KB
  • encodings/mac_roman.pyc
    2KB
  • encodings/mac_romanian.pyc
    2KB
  • encodings/mac_turkish.pyc
    2KB
  • encodings/mbcs.pyc
    1KB
  • encodings/oem.pyc
    1KB
  • encodings/palmos.pyc
    2KB
  • encodings/ptcp154.pyc
    2KB
  • encodings/punycode.pyc
    6KB
  • encodings/quopri_codec.pyc
    2KB
  • encodings/raw_unicode_escape.pyc
    1KB
  • encodings/rot_13.pyc
    2KB
  • encodings/shift_jis.pyc
    1KB
  • encodings/shift_jis_2004.pyc
    1KB
  • encodings/shift_jisx0213.pyc
    1KB
  • encodings/tis_620.pyc
    2KB
  • encodings/undefined.pyc
    2KB
  • encodings/unicode_escape.pyc
    1KB
  • encodings/utf_16.pyc
    4KB
  • encodings/utf_16_be.pyc
    1KB
  • encodings/utf_16_le.pyc
    1KB
  • encodings/utf_32.pyc
    4KB
  • encodings/utf_32_be.pyc
    1KB
  • encodings/utf_32_le.pyc
    1KB
  • encodings/utf_7.pyc
    1KB
  • encodings/utf_8.pyc
    1KB
  • encodings/utf_8_sig.pyc
    4KB
  • encodings/uu_codec.pyc
    3KB
  • encodings/zlib_codec.pyc
    3KB
  • enum.pyc
    23KB
  • functools.pyc
    27KB
  • heapq.pyc
    13KB
  • io.pyc
    3KB
  • keyword.pyc
    1KB
  • linecache.pyc
    3KB
  • locale.pyc
    33KB
  • operator.pyc
    13KB
  • re.pyc
    14KB
  • reprlib.pyc
    5KB
  • sre_compile.pyc
    14KB
  • sre_constants.pyc
    6KB
  • sre_parse.pyc
    21KB
  • traceback.pyc
    19KB
  • types.pyc
    9KB
  • warnings.pyc
    13KB
  • weakref.pyc
    19KB
  • DrawBot/certifi/cacert.pem
    275KB
  • DrawBot/colorPalettes/garticColors.txt
    182B
  • DrawBot/colorPalettes/garticCoordinates.txt
    179B
  • DrawBot/colorPalettes/paintColors.txt
    215B
  • DrawBot/colorPalettes/paintCoordinates.txt
    187B
  • DrawBot/colorPalettes/skribblColors.txt
    211B
  • DrawBot/colorPalettes/skribblCoordinates.txt
    219B
  • DrawBot/d3dcompiler_47.dll
    .dll 3.3MB
  • DrawBot/drawbot.ico
    179KB
  • DrawBot/libEGL.dll
    .dll 22KB
  • DrawBot/libGLESv2.dll
    .dll 2.8MB
  • DrawBot/libcrypto-1_1.dll
    .dll 2.1MB
  • DrawBot/libffi-7.dll
    .dll 28KB
  • DrawBot/libssl-1_1.dll
    .dll 524KB
  • DrawBot/opengl32sw.dll
    .dll 15.3MB
  • DrawBot/pyexpat.pyd
    .dll 163KB
  • DrawBot/python3.dll
    .dll 57KB
  • DrawBot/python38.dll
    .dll 3.7MB
  • DrawBot/select.pyd
    .dll 23KB
  • DrawBot/unicodedata.pyd
    .dll 1.0MB

DrawBot.zip

  • SHA256 3b1fa4d6b9318b717472753772fdbff5d8d7ec43d1e67f80d479ae15e62f66ff
  • MD5 SHA1 SHA512 SSDEEP TLSH