Spyroid VIP.zip
- SHA256 83bb2385b733ec7672ac38dc514cf1e31275fad4a8f5c468c537451fe1825192
Overview
overview
7Static
static
7Spyroid VI....3.dll
windows10-2004-x64
1Spyroid VI....3.dll
windows11-ltsc_2024-x64
1Spyroid VI...rk.dll
windows10-2004-x64
1Spyroid VI...rk.dll
windows11-ltsc_2024-x64
1Spyroid VI...ys.dll
windows10-2004-x64
1Spyroid VI...ys.dll
windows11-ltsc_2024-x64
1Spyroid VI...I2.dll
windows10-2004-x64
1Spyroid VI...I2.dll
windows11-ltsc_2024-x64
1Spyroid VI...PS.dll
windows10-2004-x64
1Spyroid VI...PS.dll
windows11-ltsc_2024-x64
1Spyroid VI...ms.dll
windows10-2004-x64
1Spyroid VI...ms.dll
windows11-ltsc_2024-x64
1Spyroid VI...pf.dll
windows10-2004-x64
1Spyroid VI...pf.dll
windows11-ltsc_2024-x64
1Spyroid VI...ts.dll
windows10-2004-x64
1Spyroid VI...ts.dll
windows11-ltsc_2024-x64
1Spyroid VI...rk.dll
windows10-2004-x64
1Spyroid VI...rk.dll
windows11-ltsc_2024-x64
1Spyroid VI...UI.dll
windows10-2004-x64
1Spyroid VI...UI.dll
windows11-ltsc_2024-x64
1Spyroid VI...io.dll
windows10-2004-x64
1Spyroid VI...io.dll
windows11-ltsc_2024-x64
1Spyroid VI...on.dll
windows10-2004-x64
1Spyroid VI...on.dll
windows11-ltsc_2024-x64
1Spyroid VI...rk.dll
windows10-2004-x64
1Spyroid VI...rk.dll
windows11-ltsc_2024-x64
1Spyroid VI...UI.dll
windows10-2004-x64
1Spyroid VI...UI.dll
windows11-ltsc_2024-x64
1Spyroid VI...IP.exe
windows10-2004-x64
1Spyroid VI...IP.exe
windows11-ltsc_2024-x64
4Spyroid VI...le.dll
windows10-2004-x64
1Spyroid VI...le.dll
windows11-ltsc_2024-x64
1Behavioral task
behavioral1
Sample
Spyroid VIP/Spyroid VIP Patched By WantHacks/Bunifu.UI.WinForms.1.5.3.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Spyroid VIP/Spyroid VIP Patched By WantHacks/Bunifu.UI.WinForms.1.5.3.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Spyroid VIP/Spyroid VIP Patched By WantHacks/DrakeUI.Framework.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Spyroid VIP/Spyroid VIP Patched By WantHacks/DrakeUI.Framework.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Spyroid VIP/Spyroid VIP Patched By WantHacks/GeoIPCitys.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Spyroid VIP/Spyroid VIP Patched By WantHacks/GeoIPCitys.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
Spyroid VIP/Spyroid VIP Patched By WantHacks/Guna.UI2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Spyroid VIP/Spyroid VIP Patched By WantHacks/Guna.UI2.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
Spyroid VIP/Spyroid VIP Patched By WantHacks/LiveCharts.MAPS.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Spyroid VIP/Spyroid VIP Patched By WantHacks/LiveCharts.MAPS.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
Spyroid VIP/Spyroid VIP Patched By WantHacks/LiveCharts.WinForms.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Spyroid VIP/Spyroid VIP Patched By WantHacks/LiveCharts.WinForms.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
Spyroid VIP/Spyroid VIP Patched By WantHacks/LiveCharts.Wpf.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Spyroid VIP/Spyroid VIP Patched By WantHacks/LiveCharts.Wpf.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
Spyroid VIP/Spyroid VIP Patched By WantHacks/LiveCharts.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Spyroid VIP/Spyroid VIP Patched By WantHacks/LiveCharts.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral17
Sample
Spyroid VIP/Spyroid VIP Patched By WantHacks/MetroFramework.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Spyroid VIP/Spyroid VIP Patched By WantHacks/MetroFramework.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
Spyroid VIP/Spyroid VIP Patched By WantHacks/MetroSet UI.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
Spyroid VIP/Spyroid VIP Patched By WantHacks/MetroSet UI.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
Spyroid VIP/Spyroid VIP Patched By WantHacks/NAudio.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
Spyroid VIP/Spyroid VIP Patched By WantHacks/NAudio.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
Spyroid VIP/Spyroid VIP Patched By WantHacks/Newtonsoft.Json.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
Spyroid VIP/Spyroid VIP Patched By WantHacks/Newtonsoft.Json.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
Spyroid VIP/Spyroid VIP Patched By WantHacks/SipaaFramework.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
Spyroid VIP/Spyroid VIP Patched By WantHacks/SipaaFramework.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
Spyroid VIP/Spyroid VIP Patched By WantHacks/Siticone.Desktop.UI.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
Spyroid VIP/Spyroid VIP Patched By WantHacks/Siticone.Desktop.UI.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
Spyroid VIP/Spyroid VIP Patched By WantHacks/Spyroid VIP.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
Spyroid VIP/Spyroid VIP Patched By WantHacks/Spyroid VIP.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
Spyroid VIP/Spyroid VIP Patched By WantHacks/System.IO.Compression.ZipFile.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
Spyroid VIP/Spyroid VIP Patched By WantHacks/System.IO.Compression.ZipFile.dll
Resource
win11ltsc2024-20260709-en
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
| resource | yara_rule |
|---|---|
| static1/unpack001/Spyroid VIP/Spyroid VIP Patched By WantHacks/LiveCharts.MAPS.dll | agile_net |
Detects ConfuserEx .NET packer.
| resource | yara_rule |
|---|---|
| static1/unpack001/Spyroid VIP/Spyroid VIP Patched By WantHacks/Siticone.Desktop.UI.dll | ConfuserEx |
Checks for missing JAR codesign signature.
| resource |
|---|
| unpack001/Spyroid VIP/Spyroid VIP Patched By WantHacks/res/Lib/apktool.jar |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/Spyroid VIP/Spyroid VIP Patched By WantHacks/Bunifu.UI.WinForms.1.5.3.dll |
| unpack001/Spyroid VIP/Spyroid VIP Patched By WantHacks/DrakeUI.Framework.dll |
| unpack001/Spyroid VIP/Spyroid VIP Patched By WantHacks/GeoIPCitys.dll |
| unpack001/Spyroid VIP/Spyroid VIP Patched By WantHacks/LiveCharts.MAPS.dll |
| unpack001/Spyroid VIP/Spyroid VIP Patched By WantHacks/LiveCharts.WinForms.dll |
| unpack001/Spyroid VIP/Spyroid VIP Patched By WantHacks/LiveCharts.Wpf.dll |
| unpack001/Spyroid VIP/Spyroid VIP Patched By WantHacks/LiveCharts.dll |
| unpack001/Spyroid VIP/Spyroid VIP Patched By WantHacks/MetroFramework.dll |
| unpack001/Spyroid VIP/Spyroid VIP Patched By WantHacks/MetroSet UI.dll |
| unpack001/Spyroid VIP/Spyroid VIP Patched By WantHacks/NAudio.dll |
| unpack001/Spyroid VIP/Spyroid VIP Patched By WantHacks/SipaaFramework.dll |
| unpack001/Spyroid VIP/Spyroid VIP Patched By WantHacks/Spyroid VIP.exe |
| unpack001/Spyroid VIP/Spyroid VIP Patched By WantHacks/WinMM.Net.dll |
| unpack001/Spyroid VIP/Spyroid VIP Patched By WantHacks/res/Lib/7z.dll |
| unpack001/Spyroid VIP/Spyroid VIP Patched By WantHacks/res/Lib/7z.exe |
Codesigned file was signed by an untrusted entity.
| resource |
|---|
| unpack001/Spyroid VIP/Spyroid VIP Patched By WantHacks/Guna.UI2.dll |
| unpack001/Spyroid VIP/Spyroid VIP Patched By WantHacks/Siticone.Desktop.UI.dll |
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Nov 25, 2023
CN=Sobatdata Software
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Mar 8, 2023
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Unsigned PE
Checks for missing Authenticode signature.
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Oct 25, 2022
CN=Siticone Technology
Unsigned PE
Checks for missing Authenticode signature.
Nov 5, 2016
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Nov 5, 2016
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=3, id=11, version=8047,
count=9, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=1, id=95, version=2190,
count=105, id=1, productName=Unmarked objects,
count=7, id=93, version=2179,
count=224, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=2, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=39, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=5, id=259, productName=VS2019 v16.8.4 build 29336, version=29336,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=12, version=7291,
count=3, id=11, version=8047,
count=8, id=14, version=7299,
count=11, id=10, version=8047,
count=2, id=4, version=8047,
count=1, id=95, version=2190,
count=155, id=1, productName=Unmarked objects,
count=9, id=93, version=2179,
count=75, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=5, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=259, productName=VS2019 v16.8.4 build 29336, version=29336,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Nov 19, 2021
CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Unsigned JAR
Checks for missing JAR codesign signature.
Nov 19, 2021
CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Nov 19, 2021
CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US