General
-
Target
reptile-small.rar
-
Size
309KB
-
MD5
2f4327515aff4a16196e460d55658382
-
SHA1
d0642d2888cbd9c9c19315464ce0e3ad2bfc8edc
-
SHA256
9546a267a67cd8b58ae11171f0c0238b3a828262f96ab2c682b99e2c1bdab05a
-
SHA512
abd6cb18e7140708157fedda3ae66a85105384a3e60e61f95aa8605c6128087a22440bdec504cbd9cd3ec64be90961f0923fdd3c6ecbd3f1e2842bd252aeaa98
-
SSDEEP
6144:4JnHKnPlaIeupO45akAHGC7cOW86KCtokOM03CMMRBBcIHn9OmBpP:4JHIPlaGukuGC7XW86KCXn0wuODBpP
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
reptile-small.rar
Password: infected
-
Driver/Driver.cpp
-
Driver/Driver.dsp
-
Driver/Driver.dsw
-
Driver/Driver.h
-
Driver/Driver.ncb
-
Driver/Jiurl_PortHide.cpp
-
Driver/Jiurl_PortHide.h
-
Driver/Jiurl_tcpioctl.h
-
Driver/ProcessName.c
-
Driver/ProcessName.h
-
Driver/Rootkit.cpp
-
Driver/Rootkit.h
-
Driver/ioctlcmd.h
-
Extras/encrypt.exe
Password: infected
d37c06b7a012aae518363f1da9c49f07
Headers
Imports
Sections
-
Extras/reptile.txt
-
Remove/remove.cpp
-
Remove/remove.dsp
-
Remove/remove.dsw
-
Remove/remove.ncb
-
advscan.cpp
-
advscan.h
-
banner.cpp
-
banner.h
-
commands.cpp
-
commands.h
-
configs.h
-
crypt.cpp
-
crypt.h
-
dcom.cpp
-
dcom.h
-
defines.h
-
download.cpp
-
download.h
-
driveinfo.cpp
-
driveinfo.h
-
externs.h
-
fphost.cpp
-
fphost.h
-
ftpd.cpp
-
ftpd.h
-
fu.cpp
-
fu.h
-
fudll.h
-
functions.h
-
includes.h
-
info.cpp
-
info.h
-
ioctlcmd.h
-
irc.cpp
-
irc.h
-
keylog.cpp
-
loaddlls.cpp
-
loaddlls.h
-
lsass.cpp
-
lsass.h
-
ms04-007.cpp
-
ms04-007.h
-
ms05-039.cpp
-
ms05-039.h
-
mssql.cpp
-
mssql.h
-
netbios.cpp
-
netbios.h
-
netdde.cpp
-
netdde.h
-
netstatp.cpp
-
netstatp.h
-
netutils.cpp
-
netutils.h
-
passwd.h
-
pnp.cpp
-
pnp.h
-
processes.cpp
-
processes.h
-
protocol.cpp
-
protocol.h
-
pstore.cpp
-
pstore.h
-
pstorec.tlh
-
pstorec.tli
-
redirect.cpp
-
redirect.h
-
regcontrol.cpp
-
regcontrol.h
-
reptile.cpp
-
reptile.dsp
-
reptile.dsw
-
reptile.h
-
reptile.ncb
-
reptile.opt
-
reptile.plg
-
reptile.sln
-
reptile.suo
-
reptile.vcproj
-
reptilepass.txt
-
secure.cpp
-
secure.h
-
service.cpp
-
service.h
-
sniffer.cpp
-
sniffer.h
-
socks4.cpp
-
socks4.h
-
speedtest.cpp
-
speedtest.h
-
strings.h
-
stub.exe
-
svchost.cpp
-
svchost.h
-
tcpip.h
-
thcsql.cpp
-
thcsql.h
-
threads.cpp
-
threads.h
-
utility.cpp
-
utility.h
-
vscan.cpp
-
vscan.h
-
vscandef.h
-
wins.cpp
-
wins.h
-
wkssvc.cpp
-
wkssvc.h