Folder[.]rar | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

Folder.rar
Size

33.1MB
MD5

cf612197c75923ca827e198325e53657
SHA1

131f8ff92ec993af2d242cb676a8b006448c7b50
SHA256

4621fab7e79c7f65a52220c1cdb75aef0e2f5a6dfebf3f3380e075b49235d1be
SHA512

d4c688ace2239a3718c3625f9750f2ed1aea93bb56343d4b8d01d94c506a9968ff927efb0cd5b086b74ff2e1ca559738b17c181bbccfa35d0d121049715434e8
SSDEEP

786432:514WO3QqurabsuiCWulEr+47y34NGjC6nI1Gcs:P4WO3krzuiCxo97NG26I13s

Score

7^/10

agilenet

Malware Config

Signatures

.NET Reactor proctector 1 IoCs

Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

Processes:

resource	yara_rule
static1/unpack001/Folder/OnlineSet-up.exe	net_reactor

Obfuscated with Agile.Net obfuscator 3 IoCs

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet

Processes:

resource	yara_rule
static1/unpack001/Folder/NetworkLicenseService/Setup64.dll	agile_net
static1/unpack001/Folder/NetworkLicenseServiceDashboard/NetworkLicenseService/Setup64.dll	agile_net
static1/unpack001/Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/Setup64.dll	agile_net

Unsigned PE 10 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/Folder/NetworkLicenseService/Setup.dll
unpack001/Folder/NetworkLicenseService/Setup64.dll
unpack001/Folder/NetworkLicenseService/log4net.dll
unpack001/Folder/NetworkLicenseServiceDashboard/NetworkLicenseService/Setup.dll
unpack001/Folder/NetworkLicenseServiceDashboard/NetworkLicenseService/Setup64.dll
unpack001/Folder/NetworkLicenseServiceDashboard/NetworkLicenseService/log4net.dll
unpack001/Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/Setup.dll
unpack001/Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/Setup64.dll
unpack001/Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/log4net.dll
unpack001/Folder/OnlineSet-up.exe

Files

Folder.rar
.rar

Password: 1234
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/content/feature-usage.html
.html .js
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/content/index.html
.html .js
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/content/log.html
.html .js
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/content/manage.html
.html .js
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/content/usage.html
.html .js
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/fonts/DNLTL.woff
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/fonts/DNLTLI.woff
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/fonts/DNLTM.woff
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/fonts/DNLTR.woff
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/fonts/DNRB.eot
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/fonts/DNRB.woff
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/fonts/DNRM.eot
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/fonts/DNRM.woff
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/fonts/DNRR.woff
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/fonts/entypo.woff
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/images/dashboard.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/images/flowerWrap.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/images/master-bg.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/images/secureteam_logo2.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/js/LicenseManagerService.js
.js
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/js/console.js
.js
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/js/jqplot.canvasAxisLabelRenderer.min.js
.js
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/js/jqplot.canvasTextRenderer.min.js
.js
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/js/jqplot.dateAxisRenderer.min.js
.js
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/js/jquery.jqplot.js
.js
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/js/jquery.jqplot.min.js
.js
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/js/jquery.min.js
.js
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/js/kendo.web.min.js
.js
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Metro/editor.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Metro/imagebrowser.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Metro/loading-image.gif
.gif
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Metro/loading.gif
.gif
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Metro/loading_2x.gif
.gif
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Metro/slider-h.gif
.gif
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Metro/slider-v.gif
.gif
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Metro/sprite.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Metro/sprite_2x.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Uniform/editor.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Uniform/imagebrowser.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Uniform/loading-image.gif
.gif
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Uniform/loading.gif
.gif
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Uniform/loading_2x.gif
.gif
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Uniform/slider-h.gif
.gif
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Uniform/slider-v.gif
.gif
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Uniform/sprite.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Uniform/sprite_2x.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/agile.licadmin.css
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/images/back.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/images/kendoui.ttf
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/images/kendoui.woff
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/images/wp8_icons.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/images/wp8_inverseicons.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/jquery.jqplot.min.css
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/kendo.common.min.css
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/kendo.metro.min.css
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/reset.css
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/brushed-metal.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/dots1.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/dots10.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/dots11.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/dots12.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/dots13.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/dots2.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/dots3.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/dots4.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/dots5.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/dots6.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/dots7.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/dots8.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/dots9.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/glass-lighter.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/glass.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/highlight.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/hsv-gradient.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/hue.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/leather1.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/leather2.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/noise.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/stripe1.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/stripe2.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/stripe3.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/stripe4.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/stripe5.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/stripe6.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/transparency.png
.png
Folder/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/transtexture.png
.png
Folder/NetworkLicenseService/Setup.config
.xml
Folder/NetworkLicenseService/Setup.dll
.dll windows x86

Password: 1234

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Folder/NetworkLicenseService/Setup64.dll
.dll windows x86

Password: 1234

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 202KB - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Folder/NetworkLicenseService/log4net.dll
.dll windows x86

Password: 1234

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 284KB - Virtual size: 282KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Folder/NetworkLicenseServiceDashboard/NetworkLicenseService/Setup.config
.xml
Folder/NetworkLicenseServiceDashboard/NetworkLicenseService/Setup.dll
.dll windows x86

Password: 1234

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Folder/NetworkLicenseServiceDashboard/NetworkLicenseService/Setup64.dll
.dll windows x86

Password: 1234

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 202KB - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Folder/NetworkLicenseServiceDashboard/NetworkLicenseService/log4net.dll
.dll windows x86

Password: 1234

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 284KB - Virtual size: 282KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Folder/NetworkLicenseServiceDashboard/fonts/DNLTL.woff
Folder/NetworkLicenseServiceDashboard/fonts/DNLTLI.woff
Folder/NetworkLicenseServiceDashboard/fonts/DNLTM.woff
Folder/NetworkLicenseServiceDashboard/fonts/DNLTR.woff
Folder/NetworkLicenseServiceDashboard/fonts/DNRB.eot
Folder/NetworkLicenseServiceDashboard/fonts/DNRB.woff
Folder/NetworkLicenseServiceDashboard/fonts/DNRM.eot
Folder/NetworkLicenseServiceDashboard/fonts/DNRM.woff
Folder/NetworkLicenseServiceDashboard/fonts/DNRR.woff
Folder/NetworkLicenseServiceDashboard/fonts/entypo.woff
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/content/feature-usage.html
.html .js
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/content/index.html
.html .js
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/content/log.html
.html .js
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/content/manage.html
.html .js
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/content/usage.html
.html .js
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/fonts/DNLTL.woff
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/fonts/DNLTLI.woff
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/fonts/DNLTM.woff
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/fonts/DNLTR.woff
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/fonts/DNRB.eot
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/fonts/DNRB.woff
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/fonts/DNRM.eot
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/fonts/DNRM.woff
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/fonts/DNRR.woff
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/fonts/entypo.woff
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/images/dashboard.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/images/flowerWrap.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/images/master-bg.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/images/secureteam_logo2.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/js/LicenseManagerService.js
.js
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/js/console.js
.js
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/js/jqplot.canvasAxisLabelRenderer.min.js
.js
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/js/jqplot.canvasTextRenderer.min.js
.js
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/js/jqplot.dateAxisRenderer.min.js
.js
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/js/jquery.jqplot.js
.js
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/js/jquery.jqplot.min.js
.js
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/js/jquery.min.js
.js
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/js/kendo.web.min.js
.js
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Metro/editor.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Metro/imagebrowser.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Metro/loading-image.gif
.gif
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Metro/loading.gif
.gif
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Metro/loading_2x.gif
.gif
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Metro/slider-h.gif
.gif
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Metro/slider-v.gif
.gif
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Metro/sprite.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Metro/sprite_2x.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Uniform/editor.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Uniform/imagebrowser.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Uniform/loading-image.gif
.gif
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Uniform/loading.gif
.gif
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Uniform/loading_2x.gif
.gif
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Uniform/slider-h.gif
.gif
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Uniform/slider-v.gif
.gif
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Uniform/sprite.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/Uniform/sprite_2x.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/agile.licadmin.css
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/images/back.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/images/kendoui.ttf
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/images/kendoui.woff
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/images/wp8_icons.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/images/wp8_inverseicons.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/jquery.jqplot.min.css
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/kendo.common.min.css
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/kendo.metro.min.css
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/reset.css
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/brushed-metal.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/dots1.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/dots10.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/dots11.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/dots12.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/dots13.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/dots2.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/dots3.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/dots4.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/dots5.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/dots6.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/dots7.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/dots8.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/dots9.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/glass-lighter.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/glass.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/highlight.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/hsv-gradient.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/hue.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/leather1.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/leather2.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/noise.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/stripe1.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/stripe2.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/stripe3.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/stripe4.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/stripe5.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/stripe6.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/transparency.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/NetworkLicenseServiceDashboard/styles/textures/transtexture.png
.png
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/Setup.config
.xml
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/Setup.dll
.dll windows x86

Password: 1234

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/Setup64.dll
.dll windows x86

Password: 1234

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 202KB - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Folder/NetworkLicenseServiceDashboard/images/NetworkLicenseService/log4net.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 284KB - Virtual size: 282KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Folder/NetworkLicenseServiceDashboard/js/1.rtf
Folder/OnlineSet-up.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 40.8MB - Virtual size: 40.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: 1234

Password: 1234

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 5.3MB - Virtual size: 5.3MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

Password: 1234

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 202KB - Virtual size: 202KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

Password: 1234

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 284KB - Virtual size: 282KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 12B

Password: 1234

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 5.3MB - Virtual size: 5.3MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

Password: 1234

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 202KB - Virtual size: 202KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

Password: 1234

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 284KB - Virtual size: 282KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 12B

Password: 1234

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text
Size: 5.3MB - Virtual size: 5.3MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 202KB - Virtual size: 202KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 284KB - Virtual size: 282KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 5.3MB - Virtual size: 5.3MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 202KB - Virtual size: 202KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 284KB - Virtual size: 282KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 5.3MB - Virtual size: 5.3MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 202KB - Virtual size: 202KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 284KB - Virtual size: 282KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 40.8MB - Virtual size: 40.8MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B