Opensourcing-Dox-Tool-V2-master[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

Opensourcing-Dox-Tool-V2-master.zip
Size

336KB
MD5

f0effccaf24378fe06d23a2486af8234
SHA1

b72bee41ad07059c392959d907c187f9a3f3d9bb
SHA256

234bbbbe2e38708d36e5813d4f925c54362286abb4a75484703707fd44ba535b
SHA512

a3d6562f64e652f23831a550df4dd546fa778ce00bf2a6b375f763a28847e8580de93e824c8f1308bdb775695a9568ecb9fcaada80261a7a7abd503782cda3db
SSDEEP

6144:ZpycVKuxcLnIXjtdW5gWSjjt9ZABCc8g4UM2uRWHqw75PKA:Zpy6KkGMALujV7Rg4U34WHxv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Opensourcing-Dox-Tool-V2-master/Dox Tool V2.exe

Files

Opensourcing-Dox-Tool-V2-master.zip
.zip
Opensourcing-Dox-Tool-V2-master/.gitattributes
Opensourcing-Dox-Tool-V2-master/Dox Tool V2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Brendan\Documents\Visual Studio 2015\Projects\Dox Tool V2\Dox Tool V2\obj\Debug\Dox Tool V2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Opensourcing-Dox-Tool-V2-master/DoxxerV2/EmailSearch.py
.py .js
Opensourcing-Dox-Tool-V2-master/DoxxerV2/updater.py
Opensourcing-Dox-Tool-V2-master/Newtonsoft.Json.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27/04/2018, 12:41

Not After

27/04/2028, 12:41

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Not Before

25/10/2018, 00:00

Not After

29/10/2021, 12:00

Subject

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b4:78:1a:cc:49:d5:0e:02:02:29:92:84:6e:ed:7c:3e:e7:17:da:8e:ee:dd:14:32:06:fb:5b:fb:d9:98:4c:ba
Signer

Actual PE Digest

b4:78:1a:cc:49:d5:0e:02:02:29:92:84:6e:ed:7c:3e:e7:17:da:8e:ee:dd:14:32:06:fb:5b:fb:d9:98:4c:ba

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/Src/Newtonsoft.Json/obj/Release/portable-net40+win8+wpa81+wp8+sl5/Newtonsoft.Json.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 447KB - Virtual size: 447KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Opensourcing-Dox-Tool-V2-master/README.md
Opensourcing-Dox-Tool-V2-master/project/Dox-Tool-V2.csproj
.xml
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2.My.Resources/Resources.cs
.vbs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2.My/MyApplication.cs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2.My/MyComputer.cs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2.My/MyProject.cs
.js
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2.My/MySettings.cs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2.My/MySettingsProperty.cs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/DrawHelpers.cs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/EmailSearch.cs
.js
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/Form1.cs
.js
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/Form1.resx
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/Functions.cs
.js
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/LogInButton.cs
.vbs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/LogInButtonWithProgress.cs
.vbs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/LogInCheckBox.cs
.vbs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/LogInColourTable.cs
.vbs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/LogInComboBox.cs
.vbs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/LogInContextMenu.cs
.vbs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/LogInGroupBox.cs
.vbs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/LogInHorizontalScrollBar.cs
.vbs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/LogInLabel.cs
.vbs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/LogInListBox.cs
.vbs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/LogInListBoxWBuiltInScrollBar.cs
.vbs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/LogInLogButton.cs
.vbs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/LogInNormalTextBox.cs
.vbs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/LogInNumeric.cs
.vbs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/LogInOnOffSwitch.cs
.vbs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/LogInPassTextBox.cs
.vbs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/LogInProgressBar.cs
.vbs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/LogInRadialProgressBar.cs
.vbs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/LogInRadioButton.cs
.vbs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/LogInRichTextBox.cs
.vbs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/LogInSeperator.cs
.vbs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/LogInStatusBar.cs
.vbs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/LogInTabControl.cs
.vbs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/LogInThemeContainer.cs
.vbs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/LogInTitledListBox.cs
.vbs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/LogInTitledListBoxWBuiltInScrollBar.cs
.vbs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/LogInTrackBar.cs
.vbs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/LogInUserTextBox.cs
.vbs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/LogInVerticalScrollBar.cs
.vbs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/NameSearch.cs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/Updater.cs
Opensourcing-Dox-Tool-V2-master/project/Dox_Tool_V2/UsernameSearch.cs
Opensourcing-Dox-Tool-V2-master/project/Properties/AssemblyInfo.cs

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 162KB - Virtual size: 162KB

.rsrc Size: 27KB - Virtual size: 27KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77Certificate

Key Usages

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23Certificate

Extended Key Usages

Key Usages

0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7eCertificate

Extended Key Usages

Key Usages

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6dCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

b4:78:1a:cc:49:d5:0e:02:02:29:92:84:6e:ed:7c:3e:e7:17:da:8e:ee:dd:14:32:06:fb:5b:fb:d9:98:4c:baSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 447KB - Virtual size: 447KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

.text
Size: 162KB - Virtual size: 162KB

.rsrc
Size: 27KB - Virtual size: 27KB

.reloc
Size: 512B - Virtual size: 12B

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Certificate

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

b4:78:1a:cc:49:d5:0e:02:02:29:92:84:6e:ed:7c:3e:e7:17:da:8e:ee:dd:14:32:06:fb:5b:fb:d9:98:4c:ba
Signer

.text
Size: 447KB - Virtual size: 447KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B