VoidsLibInjector.rar
- SHA256 4aa96d63691322d5ca481eb67e17ff49418f91f09b331bf2f6054fa384daa7ec
Overview
overview
7Static
static
5VoidsLibIn...or.exe
windows10-2004-x64
7VoidsLibIn...or.exe
windows11-ltsc_2024-x64
7VoidsLibIn...t__.py
windows10-2004-x64
3VoidsLibIn...t__.py
windows11-ltsc_2024-x64
3VoidsLibIn...me.dll
windows10-2004-x64
1VoidsLibIn...me.dll
windows11-ltsc_2024-x64
1VoidsLibIn....3.jar
windows10-2004-x64
1VoidsLibIn....3.jar
windows11-ltsc_2024-x64
1VoidsLibIn....0.jar
windows10-2004-x64
1VoidsLibIn....0.jar
windows11-ltsc_2024-x64
1VoidsLibIn...ore.py
ubuntu-18.04-amd64
1VoidsLibIn...ore.py
debian-9-armhf
1VoidsLibIn...ore.py
debian-9-mips
1VoidsLibIn...ore.py
debian-9-mipsel
1VoidsLibIn...tor.py
ubuntu-18.04-amd64
1VoidsLibIn...tor.py
debian-9-armhf
1VoidsLibIn...tor.py
debian-9-mips
1VoidsLibIn...tor.py
debian-9-mipsel
1Behavioral task
behavioral1
Sample
VoidsLibInjector/VoidsLibInjector.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
VoidsLibInjector/VoidsLibInjector.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
VoidsLibInjector/pyarmor_runtime_000000/__init__.py
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
VoidsLibInjector/pyarmor_runtime_000000/__init__.py
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral5
Sample
VoidsLibInjector/pyarmor_runtime_000000/pyarmor_runtime.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
VoidsLibInjector/pyarmor_runtime_000000/pyarmor_runtime.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
VoidsLibInjector/tools/apktool_3.0.3.jar
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
VoidsLibInjector/tools/apktool_3.0.3.jar
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
VoidsLibInjector/tools/uber-apk-signer-1.3.0.jar
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
VoidsLibInjector/tools/uber-apk-signer-1.3.0.jar
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
VoidsLibInjector/vli_core.py
Resource
ubuntu1804-amd64-20261019-en
ubuntu-18.04-amd64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
VoidsLibInjector/vli_core.py
Resource
debian9-armhf-20260513-en
debian-9-armhf
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
VoidsLibInjector/vli_core.py
Resource
debian9-mipsbe-20260513-en
debian-9-mips
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
VoidsLibInjector/vli_core.py
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
VoidsLibInjector/voids_lib_injector.py
Resource
ubuntu1804-amd64-20261019-en
ubuntu-18.04-amd64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
VoidsLibInjector/voids_lib_injector.py
Resource
debian9-armhf-20260513-en
debian-9-armhf
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
VoidsLibInjector/voids_lib_injector.py
Resource
debian9-mipsbe-20260513-en
debian-9-mips
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
VoidsLibInjector/voids_lib_injector.py
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
0 signatures
150 seconds
General
- Target VoidsLibInjector.rar
- Size 28.5MB
- Sample261024-as9g4aws7q
- SHA256 4aa96d63691322d5ca481eb67e17ff49418f91f09b331bf2f6054fa384daa7ec
- MD5 dba8167f5620fabd61fc72a6a73dae9e
- SHA1 72dbb8538563898c314918640457778c1343c9a6
- SHA512 32ed993d705738fa03ca2c13720648e24cd742ea3d4ae3a8cdf3e9d1bf27aeb1af5b9ead9b2cad54e8fac55b54e7bdfbee78bfb098dc0fb4d0bccba12d69d2c2
- SSDEEP 786432:/FXRTdiBWzIX4DLiIEAPdGglMWKjzBvRc8p9NXQ/3Sb:VCEDLYgtaWqJRc0XC3Sb
- TLSH T15367337C2F99D3C2EB6191EAF98456A3E78ACCB80854663271CC3454B7A50FCFA73512
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Codesign digest Mismatch 1 IoCs
File was altered after it was signed.
resource unpack001/VoidsLibInjector/tools/uber-apk-signer-1.3.0.jar - Detects Pyarmor 1 IoCs
resource yara_rule static1/unpack001/VoidsLibInjector/VoidsLibInjector.exe pyarmor - Detects Pyinstaller 1 IoCs
resource yara_rule static1/unpack001/VoidsLibInjector/VoidsLibInjector.exe pyinstaller - Unsigned JAR 1 IoCs
Checks for missing JAR codesign signature.
resource unpack001/VoidsLibInjector/tools/apktool_3.0.3.jar - Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/VoidsLibInjector/VoidsLibInjector.exe unpack001/VoidsLibInjector/pyarmor_runtime_000000/pyarmor_runtime.pyd - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/VoidsLibInjector/tools/uber-apk-signer-1.3.0.jar
File Explorer
-
VoidsLibInjector.rar.rar 28.5MB
-
VoidsLibInjector/README.txt2KB
-
VoidsLibInjector/VoidsLibInjector.exe.exe 11.0MB
-
voids_lib_injector.pyc54KB
-
VoidsLibInjector/compiled/README.txt46B
-
VoidsLibInjector/decompiled/README.txt131B
-
VoidsLibInjector/pyarmor_runtime_000000/__init__.py103B
-
VoidsLibInjector/pyarmor_runtime_000000/pyarmor_runtime.pyd.dll 624KB
-
VoidsLibInjector/tools/README.txt301B
-
VoidsLibInjector/tools/apktool_3.0.3.jar.jar 14.8MB
-
VoidsLibInjector/tools/uber-apk-signer-1.3.0.jar.jar 3.1MB
-
VoidsLibInjector/vli_core.py.py .sh 156KB
-
VoidsLibInjector/voids_lib_injector.py.py .sh 156KB
VoidsLibInjector/README.txt
- SHA256 a96287590903ec7cdee301de7f802ef8bd96b5b6897f1c555e05b9b311e8c49b
- MD5 8cde2b6d459c7771052a79e50a71fb37
- SHA1 8a28ed0c0e884651a5436ff0ddaa7417c33ee2c2
- SHA512 ddd6e881af23dd428533773014fe83518bd8e25f8a87ee890c0b9ffc7da501cdfcb7e4b423bdad9f8521a95e7b1e0ffed757e3301c9683bb936cc8f3ed4ff73d
- TLSH T1E051B4FF938CDBB376670193AB0A7A839711D0456A604678B48F848C1F277085BF12F1
- MD5 SHA1 SHA512 TLSH
VoidsLibInjector/VoidsLibInjector.exe
- IMPHASH e3e80a143805ea18936c8f612e25d363
- SHA256 c399db033c1cd9a7b0f31396d555643ca3a7f7662093ec2704bbda54043f8dab
- MD5 7929baa4acf82248f2cdaa9ed0d53c95
- SHA1 cba40a1ce84d2a2cd97d78685bfad06edc8ae1f6
- SHA512 da6b7d7a4472d0a72b7cebd985df85b976be3245f3562a3845c1a8cb04b6994541c0162bb7b172adf1beb20a380dbc5ad8c814432b5aa999a101b2b358403b69
- SSDEEP 196608:fEmG0W8UAgoyfA4aHzfiirGUFOmFPALCpuDYOYOpq82ZYdiX4Jkz9Rwpr2Zwl6CM:fEmxW8teaThrzFjPALiuDX91GXLwqMtq
- TLSH T175C63388B7D208B4E4EFA63D98D15C1A56E5342143A8C3DFC7F52A702AA35E5FE30752
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Pyarmor
-
Detects Pyinstaller
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
59248
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
CreateWindowExW
ShutdownBlockReasonCreate
MsgWaitForMultipleObjects
ShowWindow
DestroyWindow
RegisterClassW
DefWindowProcW
PeekMessageW
DispatchMessageW
TranslateMessage
GetMonitorInfoW
MonitorFromPoint
GetCursorPos
GetSystemMetrics
PostMessageW
GetMessageW
MessageBoxW
MessageBoxA
SystemParametersInfoW
DestroyIcon
SetWindowLongPtrW
GetWindowLongPtrW
GetClientRect
InvalidateRect
ReleaseDC
GetDC
DrawTextW
GetDialogBaseUnits
EndDialog
DialogBoxIndirectParamW
MoveWindow
SendMessageW
comctl32
ord380
kernel32
GetACP
IsValidCodePage
GetStringTypeW
GetFileAttributesExW
SetEnvironmentVariableW
FlushFileBuffers
LCMapStringW
CompareStringW
VirtualProtect
GetCurrentDirectoryW
HeapAlloc
GetFileSizeEx
GetConsoleOutputCP
GetOEMCP
GetCPInfo
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryExW
GetModuleHandleW
MulDiv
FormatMessageW
CloseHandle
GetCurrentProcess
GetModuleFileNameW
SetDllDirectoryW
GetEnvironmentStringsW
SetErrorMode
GetCurrentProcessId
OpenProcess
QueryFullProcessImageNameW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
CreateDirectoryW
GetCommandLineW
GetEnvironmentVariableW
ExpandEnvironmentStringsW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetDriveTypeW
RemoveDirectoryW
GetTempPathW
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
Sleep
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
LocalFree
SetConsoleCtrlHandler
K32EnumProcessModules
K32GetModuleFileNameExW
CreateFileW
FindFirstFileExW
GetFinalPathNameByHandleW
MultiByteToWideChar
WideCharToMultiByte
SetFilePointerEx
FreeEnvironmentStringsW
GetProcessHeap
GetTimeZoneInformation
HeapSize
HeapReAlloc
WriteConsoleW
SetEndOfFile
CreateSymbolicLinkW
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetUnhandledExceptionFilter
RtlUnwindEx
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
RtlLookupFunctionEntry
EncodePointer
RaiseException
RtlPcToFileHeader
GetCommandLineA
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ReadFile
GetFullPathNameW
SetStdHandle
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
IsProcessorFeaturePresent
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
HeapFree
GetConsoleMode
ReadConsoleW
advapi32
GetTokenInformation
OpenProcessToken
ConvertSidToStringSidW
ConvertStringSecurityDescriptorToSecurityDescriptorW
gdi32
SelectObject
DeleteObject
CreateFontIndirectW
Name
.text
Size
200KB
Virtual Size
200KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
82KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
61KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=189, id=261, version=33145,
count=12, id=260, version=33145,
count=11, id=259, version=33145,
count=3, id=253, version=35721,
count=9, id=259, version=35721,
count=17, id=260, version=35721,
count=39, id=261, version=35721,
count=11, id=257, version=33145,
count=163, id=1, productName=Unmarked objects,
count=30, id=260, version=36246,
count=1, id=258, version=36246,
voids_lib_injector.pyc
- SHA256 9e56c7df2ef2b2b515847bc3f78ba700cdb1d12e7a972f676008b83d753a984f
- MD5 fa9d6d6441cee5aaded75213885ea2f5
- SHA1 a6f5501184dc5ca105d3afbfb03e33e5b76d699b
- SHA512 d542c176d547085ed0cc43d272dcf2131dfee5a75f0cfe4cdb234e4ad1828b5453c974c15c00ffdbbdd052d83ab0ff169feccdb6245ce162231794c021116088
- SSDEEP 768:y+i0HSp6B2e6N7MzLlFp513PpqMLyFdWTmEKtqg3nzRDObnMGcwuNSx2:yJ6BK7a/xT+FdLnJnzRYMGcwuZ
- TLSH T19343026FCC0D7A46EA94C3BA0C63AE962DD2DE0540830FAC536BA6755294F73FF58120
- MD5 SHA1 SHA512 SSDEEP TLSH
VoidsLibInjector/compiled/README.txt
- SHA256 b94aac92a6de595a21b2c4897d91069d0f130ac9a43899a6854115c90e852ea1
- MD5 72d6087cf8cc26aef9cf0b4a72e72a11
- SHA1 f86ba3a6dd0c03d2ae82bd1de871fbf707d3d9f7
- SHA512 7bacc5240695f796d1fcc01aff015afe720063d2cc28adc45ad9e8704f6d75428e2799de8b89ca0bc3f07f758abc16441994e397e4f53f856066fdd1c0bc9342
- MD5 SHA1 SHA512
VoidsLibInjector/decompiled/README.txt
- SHA256 0bebdc7b270977d25a7c986e4f62d19b43bbb383015362c0af1e2121fe9c7bd0
- MD5 cf9adff3022cac7d0f21c2cc3c9b90dc
- SHA1 4a90c41494f156d1249b45e54e5f6a5ce8ee16c7
- SHA512 c2bcd66a114c267e1e4f3015190e95556d18881c3ac78c598eb248e3641c592a196f27b128b9721a10d2641664422bb1c98e1fdccd7b39d6dbe6f0b85b8b4b89
- TLSH T16FC02B3C3038940133851330850023D777249AC4883C50142819006D11F475101680E3
- MD5 SHA1 SHA512 TLSH
VoidsLibInjector/pyarmor_runtime_000000/__init__.py
- SHA256 0de658fe51036af14ee1282befa322b8a0f205b45a60cf336ea203ecd1ae6f47
- MD5 95185b96d4177f4153d8f21a0efbf831
- SHA1 ebd99e6861289cd1a25272d2ea5ac614760e77bc
- SHA512 a06959cd5fd5452a227d75233d33771735ebc6a29d06dd5413bbf81b8f2b1c2a7c18be8cdcf952628451616010ef85d8d8698aa83c20321095f1b82605c262a8
- TLSH T182B0129108957E83F231A1C1C26D647903B934E33FC044B40E489770CBDAC52CC80211
- MD5 SHA1 SHA512 TLSH
VoidsLibInjector/pyarmor_runtime_000000/pyarmor_runtime.pyd
- IMPHASH d8005cc53bcac8c396e92346ca0bacf1
- SHA256 89ee6ab468e5dcdb55f5c1f7bfdb01ce598d44e5f3335763d76ca9ee1e7a86e3
- MD5 0c9521382689b318280374fdcfa24255
- SHA1 41f2ed340d6dd153f90157ead96acacf49ef6486
- SHA512 6805b8d3ee62d9099c3a2f2b0c5e1d3f27eb87e43fda225cd84368bc4cabc2a4423fa4bff77b62d8671cb91735e097946aa16a8ec61ac08c6c510ee02ad82e8a
- SSDEEP 12288:iNBCMeP0acxOctjdcg7fUoPakbnanExLJ:iLmctjdcg7fUoPakbnanQ
- TLSH T1CBD4294BE1FA19D0E6B6D17C078BF2337C3ABA5C8160775B355CD3A127D0A5222E5B22
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4912
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
python312
PyBuffer_FillInfo
PyBuffer_Release
PyBytes_AsString
PyBytes_AsStringAndSize
PyBytes_FromStringAndSize
PyBytes_Type
PyCFunction_GetSelf
PyCFunction_Type
PyCMethod_New
PyCell_Get
PyCell_New
PyCell_Set
PyCode_GetCode
PyCode_Type
PyComplex_FromCComplex
PyComplex_ImagAsDouble
PyComplex_RealAsDouble
PyComplex_Type
PyDict_Copy
PyDict_DelItem
PyDict_GetItem
PyDict_GetItemString
PyDict_New
PyDict_Next
PyDict_SetItem
PyDict_SetItemString
PyDict_Type
PyDict_Update
PyErr_CheckSignals
PyErr_Clear
PyErr_ExceptionMatches
PyErr_Fetch
PyErr_Format
PyErr_GivenExceptionMatches
PyErr_NoMemory
PyErr_NormalizeException
PyErr_Occurred
PyErr_Restore
PyErr_SetFromWindowsErr
PyErr_SetObject
PyErr_SetString
PyEval_EvalCode
PyEval_GetBuiltins
PyEval_GetFrame
PyEval_GetGlobals
PyExc_AttributeError
PyExc_EOFError
PyExc_ImportError
PyExc_NotImplementedError
PyExc_RuntimeError
PyExc_StopIteration
PyExc_SystemError
PyExc_SystemExit
PyExc_TypeError
PyExc_UnboundLocalError
PyExc_ValueError
PyException_SetCause
PyException_SetContext
PyException_SetTraceback
PyFloat_FromDouble
PyFloat_Pack8
PyFloat_Type
PyFloat_Unpack8
PyFrozenSet_New
PyFrozenSet_Type
PyFunction_GetCode
PyFunction_NewWithQualName
PyImport_ExecCodeModuleObject
PyImport_GetModule
PyImport_GetModuleDict
PyImport_ImportModule
PyImport_ImportModuleLevel
PyImport_ImportModuleLevelObject
PyIter_Next
PyList_Append
PyList_AsTuple
PyList_GetItem
PyList_New
PyList_Sort
PyList_Type
PyLong_AsLong
PyLong_AsLongAndOverflow
PyLong_AsVoidPtr
PyLong_FromLong
PyLong_FromVoidPtr
PyLong_Type
PyMarshal_WriteObjectToString
PyMem_Free
PyMem_Malloc
PyMem_Realloc
PyMemoryView_FromBuffer
PyMethod_Function
PyMethod_Type
PyModule_Create2
PyModule_GetDict
PyModule_GetFilenameObject
PyModule_GetName
PyModule_Type
PyNumber_Add
PyNumber_And
PyNumber_AsSsize_t
PyNumber_FloorDivide
PyNumber_InPlaceAdd
PyNumber_InPlaceAnd
PyNumber_InPlaceFloorDivide
PyNumber_InPlaceLshift
PyNumber_InPlaceMatrixMultiply
PyNumber_InPlaceMultiply
PyNumber_InPlaceOr
PyNumber_InPlacePower
PyNumber_InPlaceRemainder
PyNumber_InPlaceRshift
PyNumber_InPlaceSubtract
PyNumber_InPlaceTrueDivide
PyNumber_InPlaceXor
PyNumber_Invert
PyNumber_Lshift
PyNumber_MatrixMultiply
PyNumber_Multiply
PyNumber_Negative
PyNumber_Or
PyNumber_Positive
PyNumber_Power
PyNumber_Remainder
PyNumber_Rshift
PyNumber_Subtract
PyNumber_TrueDivide
PyNumber_Xor
PyOS_double_to_string
PyOS_string_to_double
PyObject_ASCII
PyObject_Call
PyObject_CallFunction
PyObject_CallFunctionObjArgs
PyObject_CallMethod
PyObject_CheckBuffer
PyObject_DelItem
PyObject_Format
PyObject_GetAttr
PyObject_GetAttrString
PyObject_GetBuffer
PyObject_GetItem
PyObject_GetIter
PyObject_IsSubclass
PyObject_IsTrue
PyObject_Repr
PyObject_RichCompare
PyObject_SetAttr
PyObject_SetItem
PyObject_Str
PyObject_VectorcallDict
PySequence_Check
PySequence_Contains
PySequence_List
PySequence_Tuple
PySet_Add
PySet_New
PySet_Type
PySlice_New
PySys_GetObject
PyThreadState_Get
PyTraceBack_Here
PyTuple_GetItem
PyTuple_GetSlice
PyTuple_New
PyTuple_Pack
PyTuple_SetItem
PyTuple_Size
PyTuple_Type
PyType_IsSubtype
PyUnicode_AsEncodedString
PyUnicode_AsUTF8
PyUnicode_AsUTF8AndSize
PyUnicode_DecodeUTF8
PyUnicode_FromFormat
PyUnicode_FromKindAndData
PyUnicode_FromString
PyUnicode_InternInPlace
PyUnicode_New
PyUnicode_Type
Py_BuildValue
Py_DecRef
Py_IncRef
Py_InspectFlag
_PyArg_ParseTuple_SizeT
_PyBytes_Resize
_PyCode_Validate
_PyDict_GetItemWithError
_PyErr_Clear
_PyErr_ExceptionMatches
_PyErr_Format
_PyErr_GetTopmostException
_PyErr_SetObject
_PyErr_SetString
_PyList_Extend
_PyLong_AsInt
_PyLong_FromByteArray
_PyLong_New
_PyModuleSpec_IsInitializing
_PyObject_CallFunction_SizeT
_PyObject_CallMethod
_PyObject_CallMethod_SizeT
_PyObject_FastCall
_PyObject_LookupAttr
_PyObject_LookupSpecialId
_PyObject_MakeTpCall
_PyObject_NewVar
_PyRuntime
_PySet_NextEntry
_PyThreadState_GetCurrent
_PyUnicode_JoinArray
_Py_BuildValue_SizeT
_Py_CheckFunctionResult
_Py_Dealloc
_Py_EllipsisObject
_Py_FalseStruct
_Py_NoneStruct
_Py_TrueStruct
_Py_ctype_table
_Py_hashtable_compare_direct
_Py_hashtable_destroy
_Py_hashtable_hash_ptr
_Py_hashtable_new_full
_Py_hashtable_set
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
RegCloseKey
RegEnumKeyExA
RegGetValueA
RegOpenKeyExA
iphlpapi
GetAdaptersAddresses
GetNetworkParams
kernel32
CloseHandle
CreateFileA
CreateFileMappingA
DeleteCriticalSection
DeviceIoControl
EnterCriticalSection
FlushViewOfFile
FormatMessageA
GetComputerNameA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetLastError
GetProcAddress
GetProcessHeap
GetSystemTimeAsFileTime
GetTickCount
GlobalAlloc
GlobalFree
HeapAlloc
HeapFree
InitializeCriticalSection
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryA
LocalFree
MapViewOfFile
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualLock
VirtualProtect
VirtualQuery
VirtualUnlock
msvcrt
__iob_func
_amsg_exit
_errno
_get_osfhandle
_initterm
_lock
_mktime64
_snprintf
_stat64
_time64
_unlock
_vsnprintf
abort
calloc
clock
exit
fprintf
fputc
fread
free
fwrite
getc
getenv
isprint
isxdigit
malloc
memcmp
memcpy
memmove
memset
rand
realloc
signal
sprintf
srand
strchr
strcmp
strerror
strlen
strncmp
strncpy
strrchr
strstr
toupper
vfprintf
user32
wsprintfA
ws2_32
WSACleanup
WSAGetLastError
WSAStartup
closesocket
connect
gethostbyname
htons
inet_ntoa
ioctlsocket
ntohl
recv
recvfrom
select
send
sendto
setsockopt
socket
PyInit_pyarmor_runtime
Name
.text
Size
521KB
Virtual Size
520KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
49KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
93B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
676B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
VoidsLibInjector/tools/README.txt
- SHA256 675118e9d4d93029626ea7a9d246321d46c1ed0c53b5c0b51feb4c3aa25cca23
- MD5 d2d41089bfc0223fe216a1a1e82ca693
- SHA1 1dad9414a8fae896b5c6261a83c745ff655a6831
- SHA512 0a2dd9bc0537eed996f1a21c07ed9b2df798e3679fcc1761f191a6698f2ec8fd5d3752877bc0a553dfd1c3314212bd5016455ae29b7862e1e395edc377d429dd
- TLSH T1CDE0C2D224B8C5E65F127780CC54A054A7A5048DC8EB5478785E5CAA9B0947B0B6D922
- MD5 SHA1 SHA512 TLSH
VoidsLibInjector/tools/apktool_3.0.3.jar
- SHA256 dbf930b076c6b9be08d57c449cacefc3bdd6b71ebd59b3066fc0e1f5b14f9423
- MD5 50d98c920b005d2fcdc18d3d52e3f23b
- SHA1 d1b008bcf7456dd74474af9146e38d4255f548a3
- SHA512 db981572137fe44f2de7315f8b016317ac5251343b79dbe9127f130cd49316ff4b70891e8264f62cb1b3d5c694de8e8f95f65ab0611533b61646fe03b3c39298
- SSDEEP 393216:U2LT6PuZEemGwt3sjfhYMBKeXhSntdh8i0:U2LmrIhnKOonbhM
- TLSH T152F6334EBDACC038E4C39077103A93A2DB51C158C404965F07BAE98D9DECE5B5B1ABDE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned JAR
Checks for missing JAR codesign signature.
VoidsLibInjector/tools/uber-apk-signer-1.3.0.jar
- SHA256 e1299fd6fcf4da527dd53735b56127e8ea922a321128123b9c32d619bba1d835
- MD5 d1dedef51b68fc0ae1f94199ab35b894
- SHA1 1da0c40d1606c91ef3c509a1acc479137cea15cd
- SHA512 6b31ede83c1384d69c819a73ff728b2a94a42f0bfdc837b1b86a4b684fd2a9c66225ef76f6189769639481a1ad47b6bfa5abd47690ba78c580781c456b60eb11
- SSDEEP 98304:j6q394wIE5XBldJFBcTGmdFAchWSQnYvRXTJVjDflcBp:j6aiBwBBvcqEqchfYGJlBlcL
- TLSH T1A7E522126EFA803DF26701325066C426FA1A66CDE096E25F26E45ECA4DF4F835707BCD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Codesign digest Mismatch
File was altered after it was signed.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
4c485e82bbf8036b4e47f7d60c6c141c7194e26f077d72026675cc8ea6fa1eba
Digest Algorithm
sha256
Digest Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Patrick Favre-Bulle,OU=Private,O=PF Github Open Source,L=Vienna,ST=Vienna,C=AT
Chains
Oct 15, 2026
CN=Patrick Favre-Bulle,OU=Private,O=PF Github Open Source,L=Vienna,ST=Vienna,C=AT
Subject
CN=Patrick Favre-Bulle,OU=Private,O=PF Github Open Source,L=Vienna,ST=Vienna,C=AT
Serial Number
69:52:a9:3c
Issuer
CN=Patrick Favre-Bulle,OU=Private,O=PF Github Open Source,L=Vienna,ST=Vienna,C=AT
Timespan
Sep 7, 2017 - Feb 10, 2034
VoidsLibInjector/vli_core.py
- SHA256 6e9ec1f31e2f8727e452d65eeb724460491e0058f50636bb6e0a6c366b60e011
- MD5 c9d3ef0f12ec0727fb2efd2017db2345
- SHA1 668212d0d2ba2a44df1545df0974312e48da524a
- SHA512 8e8213c8a226aadada3050994815d221b554b2adcbf787a11936d56384ca4657194756b85a80a3f9f6d180daef126cff019a57df975cabafef99d915f85fdc51
- SSDEEP 3072:nzvNWYyWPgiOcXT4Yjd3nrBG8YfpTE8+utYC5QysSqOpPBY6L015XmkJ38Kl3hDW:zNW9KXUsrBWZSCPsSqJ3h3D9/eB
- TLSH T1D9F3A8855622E17E5B96CE192F43AEDC2868D9EFC4C9E701F0845A4FF0A873C94E57C2
- MD5 SHA1 SHA512 SSDEEP TLSH
VoidsLibInjector/voids_lib_injector.py
- SHA256 02ccba1221eaeaf84de24258bfe6ca73317135c3d455fb23bcc5f8de041b9e65
- MD5 204c179af9f7cf3abdeb8d33970a1492
- SHA1 4aa661f0e5c824bbcc8358e38f89bc481d82db9a
- SHA512 cdf6068170c8df7a5ca06463d4bffbfbcbd0cfd78084ae25aac170b77691395e5252a8f33bc0d7c8a798fec8e287bb07f988f61a4ac93004e8c4a89cae1ab2e8
- SSDEEP 3072:57pUFO+PvyyKjb/yVH5GUVthaYMITg3OUJoJHo66yMkTe3NlfgtSqc/i6IPvki7/:57pUFO+XN2jy1thFBc3IIpJdmSqc3DE/
- TLSH T1FBF3AA855622E17E5B96CE192F43AECC2869D9EFC5C9E701F0C45A4FE0A873C84E57C2
- MD5 SHA1 SHA512 SSDEEP TLSH