DWriteCreateFactory
Behavioral task
behavioral1
Sample
ICARCUS_Evil_Worm_Full-main.zip
Resource
win10v2004-20230915-en
General
-
Target
ICARCUS_Evil_Worm_Full-main.zip
-
Size
34.4MB
-
MD5
90fb1980ef2b425e55da9caf844effe5
-
SHA1
37353ee009fc9ed6986a7921101acc58b5bd4429
-
SHA256
bef9c74d9661d20a87f3ef487ca025be5cfd3abf8ec334ecb595f3d0cd660a27
-
SHA512
d344bd0e024989fc662d6add5f5aa03d8cdbff2aeaec542076a407c6582c4f50a63e600558edb8918a2b430e60338a69f566b3932030029b4747711d2b0a808e
-
SSDEEP
786432:Zj0DNnx2+SNYKlNdoubW3DORuv/w+S76yY8msglhChEvaMR/QJc9/b7VUMnCA24E:10DNnxVSiWADzOEHwpN6sglhC6AJclPu
Malware Config
Signatures
-
Contains code to disable Windows Defender 1 IoCs
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
resource yara_rule static1/unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/DisableWD.dll disable_win_def -
Nirsoft 1 IoCs
resource yara_rule static1/unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/ProduKey.dll Nirsoft -
Obfuscated with Agile.Net obfuscator 1 IoCs
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
resource yara_rule static1/unpack001/ICARCUS_Evil_Worm_Full-main/Guna.UI2.dll agile_net -
Unsigned PE 61 IoCs
Checks for missing Authenticode signature.
resource unpack001/ICARCUS_Evil_Worm_Full-main/DWrite.dll unpack001/ICARCUS_Evil_Worm_Full-main/Dynamitey.dll unpack001/ICARCUS_Evil_Worm_Full-main/FastColoredTextBox.dll unpack001/ICARCUS_Evil_Worm_Full-main/GMap.NET.Core.dll unpack001/ICARCUS_Evil_Worm_Full-main/GMap.NET.WindowsForms.dll unpack001/ICARCUS_Evil_Worm_Full-main/Guna.UI2.dll unpack001/ICARCUS_Evil_Worm_Full-main/IcarusEvilWorm_iPwn.exe unpack001/ICARCUS_Evil_Worm_Full-main/IconExtractor.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/7zip.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/ACTWindows.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/All-In-One.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/AskUAC.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/BSOD.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/BlankScreen.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/Bookmarks.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/Bot.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/Chat.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/Chromium.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/Clipboard.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/Clipper.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/Cmstp-Bypass.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/Computerdefaults.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/DeletePoints.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/DicordTokens.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/DisableWD.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/Email.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/Encoder.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/FileSeacher.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/FileZilla.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/HRDP.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/HVNC.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/Info.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/Install.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/InternetExplorer.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/Keylogger.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/Maps.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/Memory.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/Microphone.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/NetInstall.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/Ngrok-Disk.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/Pastime.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/PreventSleep.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/ProduKey.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/Programs.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/Ransomware.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/RunPE.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/Script.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/System.Management.Automation.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/TCPGET.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/UACBypass.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/Update.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/VB.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/WDExclusion.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/WSound.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/Wallpaper.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/WebCam.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/WifiKeys.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/Worm.dll unpack001/ICARCUS_Evil_Worm_Full-main/Plugins/uninstall.dll unpack001/ICARCUS_Evil_Worm_Full-main/Tools/HVNC-Server.exe unpack001/ICARCUS_Evil_Worm_Full-main/dnlib.dll
Files
-
ICARCUS_Evil_Worm_Full-main.zip.zip
-
ICARCUS_Evil_Worm_Full-main/DWrite.dll.dll windows:6 windows x86
f94d97c2f37d86ae027c2c82e7ddecf3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrlenW
GetModuleFileNameW
LoadLibraryA
lstrcatW
lstrcpyA
GetWindowsDirectoryA
GetProcAddress
FreeLibrary
WideCharToMultiByte
lstrcpyW
WinExec
MoveFileW
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
RaiseException
ExitProcess
GetModuleHandleExW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle
DecodePointer
Exports
Exports
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Dynamitey.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 161KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/FastColoredTextBox.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 331KB - Virtual size: 330KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Fixer.bat
-
ICARCUS_Evil_Worm_Full-main/GMap.NET.Core.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/GMap.NET.WindowsForms.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/GeoIP.dat
-
ICARCUS_Evil_Worm_Full-main/Guna.UI2.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/IcarusEvilWorm_iPwn.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5.7MB - Virtual size: 5.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/IconExtractor.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 940B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Icons/AMD.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/AMD1.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/AMD2.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/AMD3.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/CPanel.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/Client-S400.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/Defrag.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/Desktop.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/Documents.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/Done.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/Drive.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/Error.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/ISO.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/MS Store.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/Music.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/Musical.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/NO.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/NVIDIA.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/New Folder.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/PDF.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/Pacify.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/Photo.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/Pictures.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/Printer.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/Recycle Bin.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/Setup.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/Setup1.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/Sheild.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/Shldi_Flip.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/This PC.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/UAC.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/Unreal.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/User.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/Users.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/Video.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/WD.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/WSetup.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/Warning.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/WerFault.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/WinDef.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/Y0.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/bat.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/bitlocker.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/blank.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/bmp.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/cmd.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/cross.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/dll.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/error detected.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/exe.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/explorer.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/favourites.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/film.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/folders.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/icon (1).ico
-
ICARCUS_Evil_Worm_Full-main/Icons/icon (10).ico
-
ICARCUS_Evil_Worm_Full-main/Icons/icon (11).ico
-
ICARCUS_Evil_Worm_Full-main/Icons/icon (12).ico
-
ICARCUS_Evil_Worm_Full-main/Icons/icon (13).ico
-
ICARCUS_Evil_Worm_Full-main/Icons/icon (2).ico
-
ICARCUS_Evil_Worm_Full-main/Icons/icon (3).ico
-
ICARCUS_Evil_Worm_Full-main/Icons/icon (4).ico
-
ICARCUS_Evil_Worm_Full-main/Icons/icon (5).ico
-
ICARCUS_Evil_Worm_Full-main/Icons/icon (6).ico
-
ICARCUS_Evil_Worm_Full-main/Icons/icon (7).ico
-
ICARCUS_Evil_Worm_Full-main/Icons/icon (8).ico
-
ICARCUS_Evil_Worm_Full-main/Icons/icon (9).ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_1022.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_1023.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_1024.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_1025.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_1027.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_1030.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_1031.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_1032.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_1033.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_1034.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_1035.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_1036.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_1037.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_1040.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_1043.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_1301.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_1302.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_1303.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_14.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_15.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_18.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_19.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_1_115.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_21.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_22.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_23.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_25.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_28.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_29.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_3.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_30.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_31.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_32.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_33.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_34.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_35.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_36.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_37.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_38.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_39.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_4.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_40.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_41.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_42.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_43.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_44.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_46.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_47.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5100.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5101.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5205.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5301.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5302.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5303.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5304.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5305.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5306.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5307.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5308.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5309.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5310.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5311.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5312.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5313.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5314.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5315.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5318.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5319.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5321.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5322.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5323.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5324.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5325.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5326.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5327.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5328.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5329.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5330.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5331.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5332.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5333.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5334.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5335.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5336.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5337.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5338.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5339.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5340.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5342.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5343.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5344.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5345.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5346.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5348.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5349.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5350.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5351.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5352.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5353.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5354.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5355.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5356.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5357.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5358.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5360.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5365.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5366.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5367.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5368.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5369.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5370.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5371.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5372.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5374.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5377.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5378.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5379.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5381.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5382.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_5383.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_54.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_55.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_56.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_57.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_58.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_60.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6000.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6001.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6002.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6003.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6004.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6020.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6021.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6022.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6023.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6024.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6050.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6051.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6052.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6053.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6054.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6070.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6071.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6072.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6073.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6075.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6100.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6101.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6102.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6103.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6104.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6105.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6150.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6151.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6152.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6153.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6154.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6155.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6170.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6171.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6172.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6173.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6174.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6175.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6180.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6181.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6182.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6183.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6184.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6185.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_62.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6200.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6201.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6202.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6203.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6204.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6205.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6250.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6251.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6252.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6253.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_63.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6300.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6301.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6302.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6303.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_64.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_6400.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_65.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_66.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_67.ico.ps1
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_73.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_74.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_75.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_76.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_78.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_79.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_8.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_81.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_84.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_91.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_92.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_93.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_94.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_95.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/imageres_SHIDI_SHIELD_INTERNAL.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/info.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/ini.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/js.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/mouse.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/mp4.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/onedrive.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/png.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/powershell.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/py.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/q.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/save.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/sbs.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_1.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_1004.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_151.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_153.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_165.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_167.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_16715.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_16748.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_16755.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_16757.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_16758.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_16762.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_16763.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_16777.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_16779.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_16780.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_16781.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_16782.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_16806.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_16814.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_16817.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_16818.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_16824.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_16826.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_19.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_2.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_210.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_22.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_240.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_242.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_243.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_258.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_261.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_264.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_265.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_302.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_321.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_337.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_35.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_37219.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_48.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_51380.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_62998.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_62999.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_63000.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_63001.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_63008.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_63009.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_63010.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/shell32_63011.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/simple.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/txt-win10.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/txt.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/vbs.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/wscript.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/wuauclt.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/yO.ico
-
ICARCUS_Evil_Worm_Full-main/Icons/zip.ico
-
ICARCUS_Evil_Worm_Full-main/Intro.wav
-
ICARCUS_Evil_Worm_Full-main/NAudio.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Code Sign
37:37:aa:de:9f:72:21:81:eb:6e:a4:00:21:65:fb:e1Certificate
IssuerCN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=USNot Before22/01/2019, 00:00Not After27/02/2022, 23:59SubjectCN=Razer USA Ltd.,O=Razer USA Ltd.,L=Irvine,ST=California,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate
IssuerCN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=USNot Before10/12/2013, 00:00Not After09/12/2023, 23:59SubjectCN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before21/12/2012, 00:00Not After30/12/2020, 23:59SubjectCN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate
IssuerCN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=USNot Before18/10/2012, 00:00Not After29/12/2020, 23:59SubjectCN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
d0:94:af:d7:9f:51:16:9c:c5:1a:e7:ea:23:e5:08:16:11:ae:03:76:1d:25:05:ee:5f:c2:9d:59:4a:68:c8:54Signer
Actual PE Digestd0:94:af:d7:9f:51:16:9c:c5:1a:e7:ea:23:e5:08:16:11:ae:03:76:1d:25:05:ee:5f:c2:9d:59:4a:68:c8:54Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 494KB - Virtual size: 493KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/7zip.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/ACTWindows.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/All-In-One.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 4.8MB - Virtual size: 4.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/AskUAC.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/BSOD.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/BlankScreen.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/Bookmarks.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/Bot.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 840B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/Chat.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/Chromium.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/Clipboard.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/Clipper.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/Cmstp-Bypass.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/Computerdefaults.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/DeletePoints.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/DicordTokens.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/DisableWD.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/Email.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 4.6MB - Virtual size: 4.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 916B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/Encoder.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/FileSeacher.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 642KB - Virtual size: 641KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/FileZilla.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/HRDP.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 620KB - Virtual size: 619KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/HVNC.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/Info.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/Install.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/InternetExplorer.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/Keylogger.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/Maps.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/Memory.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/Microphone.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 537KB - Virtual size: 537KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 868B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/NetInstall.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/Ngrok-Disk.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 7.0MB - Virtual size: 7.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/Pastime.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/PreventSleep.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/ProduKey.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/Programs.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/Ransomware.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/RunPE.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/Script.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/System.Management.Automation.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 2.6MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 320KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/System.Net.Http.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Code Sign
33:00:00:00:2b:39:32:48:c1:b2:c9:48:f3:00:00:00:00:00:2bCertificate
IssuerCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04/09/2012, 21:12Not After04/12/2013, 21:12SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0Certificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before24/01/2013, 22:33Not After24/04/2014, 22:33SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:33:26:1a:00:00:00:00:00:31Certificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before31/08/2010, 22:19Not After31/08/2020, 22:29SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:16:68:34:00:00:00:00:00:1cCertificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before03/04/2007, 12:53Not After03/04/2021, 13:03SubjectCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
50:75:2b:f8:00:6f:71:1e:d9:81:83:7f:28:8b:b9:3f:31:db:7f:2dSigner
Actual PE Digest50:75:2b:f8:00:6f:71:1e:d9:81:83:7f:28:8b:b9:3f:31:db:7f:2dDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 168KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/System.Net.Http.xml
-
ICARCUS_Evil_Worm_Full-main/Plugins/TCPGET.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/UACBypass.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/Update.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/VB.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 840B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/WDExclusion.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/WSound.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 537KB - Virtual size: 536KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 860B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/Wallpaper.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/WebCam.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 207KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 860B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/WifiKeys.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/Worm.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Plugins/uninstall.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Tools/Background.jpg
-
ICARCUS_Evil_Worm_Full-main/Tools/Background.png.png
-
ICARCUS_Evil_Worm_Full-main/Tools/HVNC-Server.exe.exe windows:6 windows x86
638c3474e6b92f46c9790abce213198c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
ResetEvent
GetProcAddress
CreateEventA
LoadLibraryW
RaiseException
DecodePointer
WriteConsoleW
SetFilePointerEx
SetEndOfFile
HeapReAlloc
CloseHandle
ReadConsoleW
ReadFile
GetConsoleMode
GetConsoleCP
FlushFileBuffers
CreateFileW
GetProcessHeap
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
SetEvent
Sleep
WaitForSingleObject
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetConsoleTitleW
AllocConsole
HeapSize
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
GetStringTypeW
GetFileType
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetLastError
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
RtlUnwind
SetLastError
DeleteCriticalSection
GetStdHandle
WriteFile
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetACP
HeapFree
HeapAlloc
LCMapStringW
GetModuleHandleW
user32
wsprintfW
LoadCursorW
LoadIconW
ShowWindow
RegisterClassExW
CreateWindowExW
EndPaint
BeginPaint
ReleaseDC
PostQuitMessage
AppendMenuW
GetClientRect
TranslateMessage
PeekMessageW
GetMessageW
DefWindowProcW
GetSystemMenu
GetKeyState
PostMessageW
GetDC
FillRect
InvalidateRgn
DispatchMessageW
gdi32
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
BitBlt
SetDIBits
DeleteObject
CreateSolidBrush
DeleteDC
ws2_32
inet_ntoa
WSAGetLastError
htons
recv
ntohs
socket
send
getsockname
getpeername
WSAStartup
listen
closesocket
bind
accept
advapi32
SystemFunction036
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ICARCUS_Evil_Worm_Full-main/Tools/toolz
-
ICARCUS_Evil_Worm_Full-main/Uploader.php
-
ICARCUS_Evil_Worm_Full-main/dnlib.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ