hasherezade’s gists

hasherezade / Chimera_strings.txt

Created December 4, 2015 15:39

Chimera_strings

	# strings from Chimera Core.dll
	# extracted by: hasherezade
	##

	secp256k1
	:HAA6
	RIPEMD160
	SHA1
	SHA224
	SHA256

hasherezade / YOUR_FILES_ARE_ENCRYPTED.HTML

Last active June 2, 2016 07:37

Chimera info HTML

	<!--
	Take advantage of our affiliate-program!
	We offer you 50% of our profits.

	You can reach us via the bitmessage address:
	BM-2cW44Yq9DWbHYnRSfzBLVxvE6WjadchNBt
	----------------------------------------------------
	Profitieren Sie von unserem Affiliate-Programm!
	Wir bieten Ihnen 50% der erzielten Gewinne.

hasherezade / de-crypter1.cpp

Last active June 2, 2016 07:37

DeCrypter refactored

hasherezade / Stub.cs

Created December 19, 2015 00:19

Chimera crypter stub

	using System;
	using System.Runtime.InteropServices;

	internal class Stub
	{
	internal struct IMAGE_EXPORT_DIRECTORY
	{
	public uint Characteristics;

	public uint TimeDateStamp;

hasherezade / test.asm

Last active June 2, 2016 07:37

mini bootloader for educational purposes

	; mini bootloader for educational purposes
	; CC-BY: hasherezade
	;
	; compile:
	; nasm test.asm -f bin -o test.bin
	;
	; Copy to flash disk (as root)
	; example if the flash disk is /dev/sdb:
	; dd if=test.bin of=/dev/sdb bs=512 count=1
	;

hasherezade / iatp_autobuild.sh

Last active May 30, 2019 01:08

A sample bash script to build IAT_Patcher on Linux

	#!/bin/bash
	echo "Trying to autobuild IAT_patcher..."

	#QT check
	QT_VER=`qmake -v`
	QTV="version 4."
	if echo "$QT_VER" \| grep -q "$QTV"; then
	echo "[+] Qt4 found!"
	else
	echo "[-] Qt4 NOT found!"

hasherezade / 12c8c50e996240aaa42d593701d3cae2.json

Last active April 2, 2017 15:50

Cerber ransomware configs (md5 of sample in config name)

hasherezade / petya_boot.asm

Last active July 5, 2017 02:46

Bootloader detecting PETYA Ransomware and recovering Stage1 key

	; Bootloader detecting PETYA Ransomware and recovering Stage1 key
	;
	; CC-BY: hasherezade
	;
	; compile:
	; nasm boot.asm -f bin -o boot.bin
	;
	; Copy to flash disk (as root)
	; example if the flash disk is /dev/sdb:
	; dd if=boot.bin of=/dev/sdb bs=512 count=1

hasherezade / makecd.sh

Created April 20, 2016 12:47

Script to make a bootable CD with your own bootloader

	# requires: xorriso
	# copy your bootloader as: cdcontent/boot/loader.sys

	prog="xorriso -as mkisofs"
	$prog -R -J -c boot/bootcat \
	-b boot/loader.sys -no-emul-boot -boot-load-size 1 \
	-o ./bootable.iso ./cdcontent

hasherezade / petya_skull.txt

Created April 22, 2016 14:49

Petya ransomware's ASCII art (skull)

hasherezade hasherezade