General

  • Target

    120 Moded By t0nixx.rar

  • Size

    2.5MB

  • MD5

    6c156b3e3fe269385076880bce7fc094

  • SHA1

    6a07ffb2b97df75115c2bd4574628979f1b7fc1e

  • SHA256

    962d2fc9234d16a354f93cf834541e52e7d8e17567898f0cd3b6aebd5082b381

  • SHA512

    d3f58c1a9d5817ad8a826fa7335f51dc297380db655b20339135d88e788bbb6ac0bf005bed33d521bb664a04c2aba68d35781b0254a4ce60dd1a6c25db895d08

  • SSDEEP

    49152:WkPaVG8A1PG6wV0oNj3zy2dpi3W8A4+z4gkiY6MPsjk59:W6aV9jhNDGmpi3W9Dz4gPpQsG

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 120 Moded By t0nixx.rar
    .rar

    Password: infected

  • 120 Moded By t0nixx/120.cpp
  • 120 Moded By t0nixx/120.dsp
  • 120 Moded By t0nixx/120.dsw
  • 120 Moded By t0nixx/120.h
  • 120 Moded By t0nixx/120.ncb
  • 120 Moded By t0nixx/120.opt
  • 120 Moded By t0nixx/120.plg
    .html
  • 120 Moded By t0nixx/120.rc
  • 120 Moded By t0nixx/120/120.obj
  • 120 Moded By t0nixx/120/120.pch
  • 120 Moded By t0nixx/120/Adv.obj
  • 120 Moded By t0nixx/120/Crc.obj
  • 120 Moded By t0nixx/120/Cry.obj
  • 120 Moded By t0nixx/120/Ide.obj
  • 120 Moded By t0nixx/120/Ldll.obj
  • 120 Moded By t0nixx/120/Rnd.obj
  • 120 Moded By t0nixx/120/Sys.obj
  • 120 Moded By t0nixx/120/Thr.obj
  • 120 Moded By t0nixx/120/d3des.obj
  • 120 Moded By t0nixx/120/ddos.obj
  • 120 Moded By t0nixx/120/ftpd.obj
  • 120 Moded By t0nixx/120/fwbypass.obj
  • 120 Moded By t0nixx/120/icmpflood.obj
  • 120 Moded By t0nixx/120/inject.obj
  • 120 Moded By t0nixx/120/patcher.obj
  • 120 Moded By t0nixx/120/persist.obj
  • 120 Moded By t0nixx/120/pingudp.obj
  • 120 Moded By t0nixx/120/pstore.obj
  • 120 Moded By t0nixx/120/pstorec.tlh
  • 120 Moded By t0nixx/120/pstorec.tli
  • 120 Moded By t0nixx/120/socks4.obj
  • 120 Moded By t0nixx/120/synflood.obj
  • 120 Moded By t0nixx/120/tcpflood.obj
  • 120 Moded By t0nixx/120/vc60.idb
  • 120 Moded By t0nixx/120/ver.obj
  • 120 Moded By t0nixx/120/vncshit.obj
  • 120 Moded By t0nixx/120/za.obj
  • 120 Moded By t0nixx/1readme.txt
  • 120 Moded By t0nixx/Adv.cpp
  • 120 Moded By t0nixx/Adv.h
  • 120 Moded By t0nixx/Cmd.h
  • 120 Moded By t0nixx/Conf.h
  • 120 Moded By t0nixx/Crc.cpp
  • 120 Moded By t0nixx/Crc.h
  • 120 Moded By t0nixx/Cry.cpp
  • 120 Moded By t0nixx/Cry.h
  • 120 Moded By t0nixx/Def.h
  • 120 Moded By t0nixx/Denied.cpp
  • 120 Moded By t0nixx/Denied.h
  • 120 Moded By t0nixx/Encrypt.exe
    .exe windows x86

    Password: infected

    d37c06b7a012aae518363f1da9c49f07


    Headers

    Imports

    Sections

  • 120 Moded By t0nixx/Ext.h
  • 120 Moded By t0nixx/Fun.h
  • 120 Moded By t0nixx/Glo.h
  • 120 Moded By t0nixx/Ide.cpp
  • 120 Moded By t0nixx/Ide.h
  • 120 Moded By t0nixx/Inc.h
  • 120 Moded By t0nixx/Key.cpp
  • 120 Moded By t0nixx/Key.h
  • 120 Moded By t0nixx/Ldll.cpp
  • 120 Moded By t0nixx/Ldll.h
  • 120 Moded By t0nixx/Rnd.cpp
  • 120 Moded By t0nixx/Rnd.h
  • 120 Moded By t0nixx/Scanners/pstore.cpp
  • 120 Moded By t0nixx/Scanners/vncshit.cpp
  • 120 Moded By t0nixx/Scanners/vncshit.h
  • 120 Moded By t0nixx/Shel.cpp
  • 120 Moded By t0nixx/Shel.h
  • 120 Moded By t0nixx/Str.h
  • 120 Moded By t0nixx/Sys.cpp
  • 120 Moded By t0nixx/Sys.h
  • 120 Moded By t0nixx/Tcp.h
  • 120 Moded By t0nixx/Test.cpp
  • 120 Moded By t0nixx/Test.h
  • 120 Moded By t0nixx/Thr.cpp
  • 120 Moded By t0nixx/Thr.h
  • 120 Moded By t0nixx/botkiller.cpp
  • 120 Moded By t0nixx/botkiller.h
  • 120 Moded By t0nixx/d3des.c
  • 120 Moded By t0nixx/d3des.h
  • 120 Moded By t0nixx/ddos.cpp
  • 120 Moded By t0nixx/ddos.h
  • 120 Moded By t0nixx/dll.cpp
  • 120 Moded By t0nixx/ftpd.cpp
  • 120 Moded By t0nixx/ftpd.h
  • 120 Moded By t0nixx/fwb.cpp
  • 120 Moded By t0nixx/fwbypass.h
  • 120 Moded By t0nixx/icmpflood.cpp
  • 120 Moded By t0nixx/icmpflood.h
  • 120 Moded By t0nixx/inject.cpp
  • 120 Moded By t0nixx/inject.h
  • 120 Moded By t0nixx/passwd.h
  • 120 Moded By t0nixx/patcher.cpp
  • 120 Moded By t0nixx/patcher.h
  • 120 Moded By t0nixx/persist.cpp
  • 120 Moded By t0nixx/pingudp.cpp
  • 120 Moded By t0nixx/pingudp.h
  • 120 Moded By t0nixx/pstore.cpp
  • 120 Moded By t0nixx/pstorec.tlh
  • 120 Moded By t0nixx/pstorec.tli
  • 120 Moded By t0nixx/rfb.h
  • 120 Moded By t0nixx/sandboxie.cpp
  • 120 Moded By t0nixx/sniff.cpp
  • 120 Moded By t0nixx/sniff.h
  • 120 Moded By t0nixx/socks4.cpp
  • 120 Moded By t0nixx/socks4.h
  • 120 Moded By t0nixx/synflood.cpp
  • 120 Moded By t0nixx/synflood.h
  • 120 Moded By t0nixx/tcpflood.cpp
  • 120 Moded By t0nixx/tcpflood.h
  • 120 Moded By t0nixx/tcpflood2.cpp
  • 120 Moded By t0nixx/tcpflood2.h
  • 120 Moded By t0nixx/tcpip.h
  • 120 Moded By t0nixx/ver.c
  • 120 Moded By t0nixx/ver.h
  • 120 Moded By t0nixx/za.h