Resubmissions

14/10/2026, 03:07

261014-dmlevsfv4m10

14/10/2026, 03:02

261014-djne2svv3j8

General

  • Target
    reverse-slop_0.1.1_x64-setup.exe
  • Size 51.0MB
  • Sample261014-dmlevsfv4m
  • SHA256 326d0b698547c24bf837739f9f574a740248dca3702fc87a3cabc047a77952f0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 19 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • reverse-slop_0.1.1_x64-setup.exe
    .exe 51.0MB
  • $PLUGINSDIR/NSISdl.dll
    .dll 15KB
  • $PLUGINSDIR/StartMenu.dll
    .dll 7KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/modern-wizard.bmp
    25KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • $PLUGINSDIR/nsis_tauri_utils.dll
    .dll 29KB
  • engine/reverse-slop-engine.exe
    .exe 10.0MB
  • engine/slop_frida.dll
    .dll 112.1MB
  • engine/slop_mapper.exe
    .exe 301KB
  • engine/slopdrvr.sys
    .sys 751KB
  • engine/tools/magicmida/SOURCE.txt
    268B
  • engine/tools/magicmida/x64/HookLibraryx64.dll
    .dll 19KB
  • engine/tools/magicmida/x64/InjectorCLIx64.exe
    .exe 776KB
  • engine/tools/magicmida/x64/Magicmida.exe
    .exe 4.0MB
  • engine/tools/magicmida/x64/scylla_hide.ini
    1KB
  • engine/tools/magicmida/x86/Magicmida.exe
    .exe 2.7MB
  • engine/tools/magicmida/x86/scylla_hide.ini
    1011B
  • reverse-slop-ui.exe
    .exe 7.8MB
  • uninstall.exe
    .exe 83KB
  • $PLUGINSDIR/LangDLL.dll
    .dll 5KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/nsis_tauri_utils.dll
    .dll 29KB

reverse-slop_0.1.1_x64-setup.exe

  • IMPHASH 61259b55b8912888e90f516ca08dc514
  • SHA256 326d0b698547c24bf837739f9f574a740248dca3702fc87a3cabc047a77952f0
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
13925
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths