General

  • Target
    watcher-build.zip
  • Size 13.6MB
  • Sample260909-bef43azfph
  • SHA256 9abab408cabcbe31e21ce6bfc43ca2c096bfb78b2878d968f03879e087c12e7a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • watcher-build.zip
    .zip 13.6MB
  • _internal/PIL/_avif.cp310-win_amd64.pyd
    .dll 7.5MB
  • _internal/PIL/_imaging.cp310-win_amd64.pyd
    .dll 2.5MB
  • _internal/PIL/_imagingcms.cp310-win_amd64.pyd
    .dll 267KB
  • _internal/PIL/_imagingmath.cp310-win_amd64.pyd
    .dll 21KB
  • _internal/PIL/_imagingtk.cp310-win_amd64.pyd
    .dll 14KB
  • _internal/PIL/_webp.cp310-win_amd64.pyd
    .dll 406KB
  • _internal/VCRUNTIME140.dll
    .dll 95KB
  • _internal/_bz2.pyd
    .dll 81KB
  • _internal/_ctypes.pyd
    .dll 120KB
  • _internal/_decimal.pyd
    .dll 248KB
  • _internal/_elementtree.pyd
    .dll 125KB
  • _internal/_hashlib.pyd
    .dll 63KB
  • _internal/_lzma.pyd
    .dll 154KB
  • _internal/_queue.pyd
    .dll 30KB
  • _internal/_socket.pyd
    .dll .js 77KB
  • _internal/_ssl.pyd
    .dll 156KB
  • _internal/api-ms-win-core-console-l1-1-0.dll
    .dll 21KB
  • _internal/api-ms-win-core-datetime-l1-1-0.dll
    .dll 21KB
  • _internal/api-ms-win-core-debug-l1-1-0.dll
    .dll 21KB
  • _internal/api-ms-win-core-errorhandling-l1-1-0.dll
    .dll 21KB
  • _internal/api-ms-win-core-fibers-l1-1-0.dll
    .dll 21KB
  • _internal/api-ms-win-core-fibers-l1-1-1.dll
    .dll 21KB
  • _internal/api-ms-win-core-file-l1-1-0.dll
    .dll 25KB
  • _internal/api-ms-win-core-file-l1-2-0.dll
    .dll 21KB
  • _internal/api-ms-win-core-file-l2-1-0.dll
    .dll 21KB
  • _internal/api-ms-win-core-handle-l1-1-0.dll
    .dll 21KB
  • _internal/api-ms-win-core-heap-l1-1-0.dll
    .dll 21KB
  • _internal/api-ms-win-core-interlocked-l1-1-0.dll
    .dll 21KB
  • _internal/api-ms-win-core-kernel32-legacy-l1-1-1.dll
    .dll 21KB
  • _internal/api-ms-win-core-libraryloader-l1-1-0.dll
    .dll 21KB
  • _internal/api-ms-win-core-localization-l1-2-0.dll
    .dll 21KB
  • _internal/api-ms-win-core-memory-l1-1-0.dll
    .dll 21KB
  • _internal/api-ms-win-core-namedpipe-l1-1-0.dll
    .dll 21KB
  • _internal/api-ms-win-core-processenvironment-l1-1-0.dll
    .dll 21KB
  • _internal/api-ms-win-core-processthreads-l1-1-0.dll
    .dll 21KB
  • _internal/api-ms-win-core-processthreads-l1-1-1.dll
    .dll 21KB
  • _internal/api-ms-win-core-profile-l1-1-0.dll
    .dll 21KB
  • _internal/api-ms-win-core-rtlsupport-l1-1-0.dll
    .dll 21KB
  • _internal/api-ms-win-core-string-l1-1-0.dll
    .dll 21KB
  • _internal/api-ms-win-core-synch-l1-1-0.dll
    .dll 21KB
  • _internal/api-ms-win-core-synch-l1-2-0.dll
    .dll 21KB
  • _internal/api-ms-win-core-sysinfo-l1-1-0.dll
    .dll 21KB
  • _internal/api-ms-win-core-sysinfo-l1-2-0.dll
    .dll 21KB
  • _internal/api-ms-win-core-timezone-l1-1-0.dll
    .dll 21KB
  • _internal/api-ms-win-core-util-l1-1-0.dll
    .dll 21KB
  • _internal/api-ms-win-crt-conio-l1-1-0.dll
    .dll 21KB
  • _internal/api-ms-win-crt-convert-l1-1-0.dll
    .dll 25KB
  • _internal/api-ms-win-crt-environment-l1-1-0.dll
    .dll 21KB
  • _internal/api-ms-win-crt-filesystem-l1-1-0.dll
    .dll 21KB
  • _internal/api-ms-win-crt-heap-l1-1-0.dll
    .dll 21KB
  • _internal/api-ms-win-crt-locale-l1-1-0.dll
    .dll 21KB
  • _internal/api-ms-win-crt-math-l1-1-0.dll
    .dll 29KB
  • _internal/api-ms-win-crt-process-l1-1-0.dll
    .dll 21KB
  • _internal/api-ms-win-crt-runtime-l1-1-0.dll
    .dll 25KB
  • _internal/api-ms-win-crt-stdio-l1-1-0.dll
    .dll 25KB
  • _internal/api-ms-win-crt-string-l1-1-0.dll
    .dll 25KB
  • _internal/api-ms-win-crt-time-l1-1-0.dll
    .dll 21KB
  • _internal/api-ms-win-crt-utility-l1-1-0.dll
    .dll 21KB
  • _internal/base_library.zip
    .zip 859KB
  • _collections_abc.pyc
    32KB
  • _weakrefset.pyc
    7KB
  • abc.pyc
    6KB
  • codecs.pyc
    32KB
  • collections/__init__.pyc
    47KB
  • collections/abc.pyc
    218B
  • copyreg.pyc
    4KB
  • encodings/__init__.pyc
    3KB
  • encodings/aliases.pyc
    10KB
  • encodings/ascii.pyc
    1KB
  • encodings/base64_codec.pyc
    2KB
  • encodings/big5.pyc
    1KB
  • encodings/big5hkscs.pyc
    1KB
  • encodings/bz2_codec.pyc
    2KB
  • encodings/charmap.pyc
    2KB
  • encodings/cp037.pyc
    2KB
  • encodings/cp1006.pyc
    2KB
  • encodings/cp1026.pyc
    2KB
  • encodings/cp1125.pyc
    9KB
  • encodings/cp1140.pyc
    2KB
  • encodings/cp1250.pyc
    2KB
  • encodings/cp1251.pyc
    2KB
  • encodings/cp1252.pyc
    2KB
  • encodings/cp1253.pyc
    2KB
  • encodings/cp1254.pyc
    2KB
  • encodings/cp1255.pyc
    2KB
  • encodings/cp1256.pyc
    2KB
  • encodings/cp1257.pyc
    2KB
  • encodings/cp1258.pyc
    2KB
  • encodings/cp273.pyc
    2KB
  • encodings/cp424.pyc
    2KB
  • encodings/cp437.pyc
    8KB
  • encodings/cp500.pyc
    2KB
  • encodings/cp720.pyc
    2KB
  • encodings/cp737.pyc
    9KB
  • encodings/cp775.pyc
    8KB
  • encodings/cp850.pyc
    8KB
  • encodings/cp852.pyc
    8KB
  • encodings/cp855.pyc
    9KB
  • encodings/cp856.pyc
    2KB
  • encodings/cp857.pyc
    8KB
  • encodings/cp858.pyc
    8KB
  • encodings/cp860.pyc
    8KB
  • encodings/cp861.pyc
    8KB
  • encodings/cp862.pyc
    8KB
  • encodings/cp863.pyc
    8KB
  • encodings/cp864.pyc
    8KB
  • encodings/cp865.pyc
    8KB
  • encodings/cp866.pyc
    9KB
  • encodings/cp869.pyc
    8KB
  • encodings/cp874.pyc
    2KB
  • encodings/cp875.pyc
    2KB
  • encodings/cp932.pyc
    1KB
  • encodings/cp949.pyc
    1KB
  • encodings/cp950.pyc
    1KB
  • encodings/euc_jis_2004.pyc
    1KB
  • encodings/euc_jisx0213.pyc
    1KB
  • encodings/euc_jp.pyc
    1KB
  • encodings/euc_kr.pyc
    1KB
  • encodings/gb18030.pyc
    1KB
  • encodings/gb2312.pyc
    1KB
  • encodings/gbk.pyc
    1KB
  • encodings/hex_codec.pyc
    2KB
  • encodings/hp_roman8.pyc
    2KB
  • encodings/hz.pyc
    1KB
  • encodings/idna.pyc
    5KB
  • encodings/iso2022_jp.pyc
    1KB
  • encodings/iso2022_jp_1.pyc
    1KB
  • encodings/iso2022_jp_2.pyc
    1KB
  • encodings/iso2022_jp_2004.pyc
    1KB
  • encodings/iso2022_jp_3.pyc
    1KB
  • encodings/iso2022_jp_ext.pyc
    1KB
  • encodings/iso2022_kr.pyc
    1KB
  • encodings/iso8859_1.pyc
    2KB
  • encodings/iso8859_10.pyc
    2KB
  • encodings/iso8859_11.pyc
    2KB
  • encodings/iso8859_13.pyc
    2KB
  • encodings/iso8859_14.pyc
    2KB
  • encodings/iso8859_15.pyc
    2KB
  • encodings/iso8859_16.pyc
    2KB
  • encodings/iso8859_2.pyc
    2KB
  • encodings/iso8859_3.pyc
    2KB
  • encodings/iso8859_4.pyc
    2KB
  • encodings/iso8859_5.pyc
    2KB
  • encodings/iso8859_6.pyc
    2KB
  • encodings/iso8859_7.pyc
    2KB
  • encodings/iso8859_8.pyc
    2KB
  • encodings/iso8859_9.pyc
    2KB
  • encodings/johab.pyc
    1KB
  • encodings/koi8_r.pyc
    2KB
  • encodings/koi8_t.pyc
    2KB
  • encodings/koi8_u.pyc
    2KB
  • encodings/kz1048.pyc
    2KB
  • encodings/latin_1.pyc
    1KB
  • encodings/mac_arabic.pyc
    8KB
  • encodings/mac_croatian.pyc
    2KB
  • encodings/mac_cyrillic.pyc
    2KB
  • encodings/mac_farsi.pyc
    2KB
  • encodings/mac_greek.pyc
    2KB
  • encodings/mac_iceland.pyc
    2KB
  • encodings/mac_latin2.pyc
    2KB
  • encodings/mac_roman.pyc
    2KB
  • encodings/mac_romanian.pyc
    2KB
  • encodings/mac_turkish.pyc
    2KB
  • encodings/mbcs.pyc
    1KB
  • encodings/oem.pyc
    1KB
  • encodings/palmos.pyc
    2KB
  • encodings/ptcp154.pyc
    2KB
  • encodings/punycode.pyc
    6KB
  • encodings/quopri_codec.pyc
    2KB
  • encodings/raw_unicode_escape.pyc
    1KB
  • encodings/rot_13.pyc
    2KB
  • encodings/shift_jis.pyc
    1KB
  • encodings/shift_jis_2004.pyc
    1KB
  • encodings/shift_jisx0213.pyc
    1KB
  • encodings/tis_620.pyc
    2KB
  • encodings/undefined.pyc
    1KB
  • encodings/unicode_escape.pyc
    1KB
  • encodings/utf_16.pyc
    4KB
  • encodings/utf_16_be.pyc
    1KB
  • encodings/utf_16_le.pyc
    1KB
  • encodings/utf_32.pyc
    4KB
  • encodings/utf_32_be.pyc
    1KB
  • encodings/utf_32_le.pyc
    1KB
  • encodings/utf_7.pyc
    1KB
  • encodings/utf_8.pyc
    1KB
  • encodings/utf_8_sig.pyc
    4KB
  • encodings/uu_codec.pyc
    3KB
  • encodings/zlib_codec.pyc
    2KB
  • enum.pyc
    25KB
  • functools.pyc
    27KB
  • genericpath.pyc
    3KB
  • heapq.pyc
    13KB
  • io.pyc
    3KB
  • keyword.pyc
    907B
  • linecache.pyc
    4KB
  • locale.pyc
    45KB
  • ntpath.pyc
    14KB
  • operator.pyc
    13KB
  • os.pyc
    30KB
  • posixpath.pyc
    10KB
  • re.pyc
    13KB
  • reprlib.pyc
    5KB
  • sre_compile.pyc
    14KB
  • sre_constants.pyc
    6KB
  • sre_parse.pyc
    21KB
  • stat.pyc
    4KB
  • traceback.pyc
    21KB
  • types.pyc
    9KB
  • warnings.pyc
    13KB
  • weakref.pyc
    19KB
  • _internal/certifi/cacert.pem
    234KB
  • _internal/charset_normalizer/cd.cp310-win_amd64.pyd
    .dll 111KB
  • _internal/charset_normalizer/md.cp310-win_amd64.pyd
    .dll 194KB
  • _internal/libcrypto-1_1.dll
    .dll 3.3MB
  • _internal/libffi-7.dll
    .dll 32KB
  • _internal/libssl-1_1.dll
    .dll 688KB
  • _internal/pyexpat.pyd
    .dll 194KB
  • _internal/python310.dll
    .dll 4.3MB
  • _internal/select.pyd
    .dll 29KB
  • _internal/ucrtbase.dll
    .dll 1.3MB
  • _internal/unicodedata.pyd
    .dll 1.1MB
  • watcher.exe
    .exe 2.1MB
  • watcher.pyc
    3KB

watcher-build.zip

  • SHA256 9abab408cabcbe31e21ce6bfc43ca2c096bfb78b2878d968f03879e087c12e7a
  • MD5 SHA1 SHA512 SSDEEP TLSH