Network Tools[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

Network Tools.zip
Size

3.8MB
MD5

f37896fb70b66d6d96d90c55c284201d
SHA1

e4d4736646296afd9d0832616e5a770db4c82fba
SHA256

17d1d0b0f51e4816c081b8a557fee12d3f80133794d7734d53586a6ed830b7de
SHA512

5762c0c80d3e2ba3f704b394a7ea2d74d7574290a2fb83ce16b94280dd20c3857842024a7f3493b59fc13ecf391c640036cee661c89b6e8531686121d5a62d2e
SSDEEP

98304:x7tW2F1jvC517w3L7cXq/7wFZMOm1jv/2MM1:xR1F1LuO/UFmR1LuMW

Score

3^/10

Malware Config

Signatures

Unsigned PE 6 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Network Tools/Network Tools/bin/Debug/EAGetMail40.dll
unpack001/Network Tools/Network Tools/bin/Debug/EMail.NET.dll
unpack001/Network Tools/Network Tools/bin/Debug/Network Tools.exe
unpack001/Network Tools/Network Tools/bin/Debug/System.Web.dll
unpack001/Network Tools/Network Tools/obj/x86/Debug/Network Tools.exe
unpack001/Network Tools/Network Tools/obj/x86/Debug/TempPE/My Project.Resources.Designer.vb.dll

Files

Network Tools.zip
.zip
Network Tools/Network Tools.sln
Network Tools/Network Tools.suo
Network Tools/Network Tools/1.ico
Network Tools/Network Tools/AboutBox1.Designer.vb
Network Tools/Network Tools/AboutBox1.resx
.vbs
Network Tools/Network Tools/AboutBox1.vb
Network Tools/Network Tools/BitConverterBE.vb
Network Tools/Network Tools/BitConverterLE.vb
Network Tools/Network Tools/BitHelper.vb
.vbs
Network Tools/Network Tools/Form1.Designer.vb
Network Tools/Network Tools/Form1.resx
.vbs
Network Tools/Network Tools/Form1.vb
.vbs
Network Tools/Network Tools/Form2.Designer.vb
Network Tools/Network Tools/Form2.resx
.vbs
Network Tools/Network Tools/Form2.vb
.vbs
Network Tools/Network Tools/Form3.Designer.vb
Network Tools/Network Tools/Form3.resx
.vbs
Network Tools/Network Tools/Form3.vb
Network Tools/Network Tools/General.vb
Network Tools/Network Tools/Help.Designer.vb
Network Tools/Network Tools/Help.resx
.vbs
Network Tools/Network Tools/Help.vb
Network Tools/Network Tools/Interop.vb
.vbs
Network Tools/Network Tools/My Project/Application.Designer.vb
Network Tools/Network Tools/My Project/Application.myapp
Network Tools/Network Tools/My Project/AssemblyInfo.vb
Network Tools/Network Tools/My Project/Resources.Designer.vb
.vbs
Network Tools/Network Tools/My Project/Resources.resx
.vbs
Network Tools/Network Tools/My Project/Settings.Designer.vb
.vbs
Network Tools/Network Tools/My Project/Settings.settings
Network Tools/Network Tools/Network Tools.vbproj
Network Tools/Network Tools/Network Tools.vbproj.user
Network Tools/Network Tools/OverwriteDelegate.vb
Network Tools/Network Tools/PrecisionTimer.vb
.vbs
Network Tools/Network Tools/Resources/YouTube.png
.png
Network Tools/Network Tools/Resources/downloader.BMP
Network Tools/Network Tools/Verify.Designer.vb
Network Tools/Network Tools/Verify.resx
.vbs
Network Tools/Network Tools/Verify.vb
.vbs
Network Tools/Network Tools/Wlanapi.vb
.vbs
Network Tools/Network Tools/YouTubeService.vb
.vbs
Network Tools/Network Tools/YouTubeVideoFile.vb
Network Tools/Network Tools/YouTubeVideoType.vb
Network Tools/Network Tools/_Settings.Designer.vb
Network Tools/Network Tools/_Settings.resx
.vbs
Network Tools/Network Tools/_Settings.vb
.vbs
Network Tools/Network Tools/bin/Debug/EAGetMail40.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 396KB - Virtual size: 393KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Network Tools/Network Tools/bin/Debug/EMail.NET.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

s:\DotnetComponents\EMail.NET\Current\EMail.NET\obj\Release (demo only)\Email.Net.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Network Tools/Network Tools/bin/Debug/EMail.NET.xml
.xml
Network Tools/Network Tools/bin/Debug/Network Tools.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\EL FOGRRRR\Network Tools\Network Tools\obj\x86\Debug\Network Tools.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 126B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Network Tools/Network Tools/bin/Debug/Network Tools.pdb
Network Tools/Network Tools/bin/Debug/Network Tools.vshost.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/12/2009, 22:40

Not After

07/03/2011, 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

69:7d:56:0d:a3:fe:3b:5c:0d:47:01:ed:dc:fa:ab:ea:ea:68:9c:9e
Signer

Actual PE Digest

69:7d:56:0d:a3:fe:3b:5c:0d:47:01:ed:dc:fa:ab:ea:ea:68:9c:9e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\dd\vsproject\vshost\vshost32\objr\i386\vshost32.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Network Tools/Network Tools/bin/Debug/Network Tools.vshost.exe.manifest
Network Tools/Network Tools/bin/Debug/Network Tools.xml
Network Tools/Network Tools/bin/Debug/System.Web.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

System.Web.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4.6MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 460KB - Virtual size: 457KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Network Tools/Network Tools/obj/x86/Debug/DesignTimeResolveAssemblyReferences.cache
Network Tools/Network Tools/obj/x86/Debug/DesignTimeResolveAssemblyReferencesInput.cache
Network Tools/Network Tools/obj/x86/Debug/Network Tools.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\EL FOGRRRR\Network Tools\Network Tools\obj\x86\Debug\Network Tools.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 126B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Network Tools/Network Tools/obj/x86/Debug/Network Tools.pdb
Network Tools/Network Tools/obj/x86/Debug/Network Tools.vbproj.FileListAbsolute.txt
Network Tools/Network Tools/obj/x86/Debug/Network Tools.vbproj.GenerateResource.Cache
Network Tools/Network Tools/obj/x86/Debug/Network Tools.vbprojResolveAssemblyReference.cache
Network Tools/Network Tools/obj/x86/Debug/Network Tools.xml
Network Tools/Network Tools/obj/x86/Debug/Network_Tools.AboutBox1.resources
Network Tools/Network Tools/obj/x86/Debug/Network_Tools.Demo.resources
Network Tools/Network Tools/obj/x86/Debug/Network_Tools.Form1.resources
Network Tools/Network Tools/obj/x86/Debug/Network_Tools.Form2.resources
Network Tools/Network Tools/obj/x86/Debug/Network_Tools.Form3.resources
Network Tools/Network Tools/obj/x86/Debug/Network_Tools.Help.resources
Network Tools/Network Tools/obj/x86/Debug/Network_Tools.Resources.resources
Network Tools/Network Tools/obj/x86/Debug/Network_Tools._Settings.resources
Network Tools/Network Tools/obj/x86/Debug/TempPE/My Project.Resources.Designer.vb.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 396KB - Virtual size: 393KB

.rsrc Size: 4KB - Virtual size: 1008B

.reloc Size: 4KB - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 204KB - Virtual size: 204KB

.rsrc Size: 1024B - Virtual size: 864B

.reloc Size: 512B - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.sdata Size: 512B - Virtual size: 126B

.rsrc Size: 244KB - Virtual size: 244KB

.reloc Size: 512B - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate

Extended Key Usages

Key Usages

61:01:cf:3e:00:00:00:00:00:0fCertificate

Extended Key Usages

Key Usages

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate

Extended Key Usages

Key Usages

61:06:94:2d:00:00:00:00:00:09Certificate

Extended Key Usages

Key Usages

69:7d:56:0d:a3:fe:3b:5c:0d:47:01:ed:dc:fa:ab:ea:ea:68:9c:9eSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 3KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 4.6MB - Virtual size: 4.5MB

.rsrc Size: 460KB - Virtual size: 457KB

.reloc Size: 4KB - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

.text
Size: 396KB - Virtual size: 393KB

.rsrc
Size: 4KB - Virtual size: 1008B

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 204KB - Virtual size: 204KB

.rsrc
Size: 1024B - Virtual size: 864B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 1.4MB - Virtual size: 1.4MB

.sdata
Size: 512B - Virtual size: 126B

.rsrc
Size: 244KB - Virtual size: 244KB

.reloc
Size: 512B - Virtual size: 12B

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

61:01:cf:3e:00:00:00:00:00:0f
Certificate

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

61:06:94:2d:00:00:00:00:00:09
Certificate

69:7d:56:0d:a3:fe:3b:5c:0d:47:01:ed:dc:fa:ab:ea:ea:68:9c:9e
Signer

.text
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 4.6MB - Virtual size: 4.5MB

.rsrc
Size: 460KB - Virtual size: 457KB

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 1.4MB - Virtual size: 1.4MB

.sdata
Size: 512B - Virtual size: 126B

.rsrc
Size: 244KB - Virtual size: 244KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 1024B - Virtual size: 776B

.reloc
Size: 512B - Virtual size: 12B