IPTOOLKIT-main[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

IPTOOLKIT-main.zip
Size

90KB
MD5

5afef76546fd4594d591683746b45eac
SHA1

56afb14dd9e980d4b367eb1f4b2a65155c2693af
SHA256

55676694bba4a3b0039f708036ded7a7749039a9aa830dbf159766d5622cb0cc
SHA512

d39ee6490d9909c6ec1e4edd22fe312403af85b545d69799f328d28dbbc8303de79381bec07ddf9af2991c067e6380123270a2173ff5fa133c2887d84e0b4fb5
SSDEEP

1536:oVJJumLifsMzIlJ0pe1GM27wzekULvAf+hYTT+XkgDAQSDzG6xZ9GjscKd+Suk:oVJJ6NziJ0BJH4fS6T+XkqSDzFEBk1uk

Score

3^/10

Malware Config

Signatures

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack001/IPTOOLKIT-main/files/PortScanner.exe
unpack001/IPTOOLKIT-main/files/arpspoof.exe
unpack001/IPTOOLKIT-main/files/rpcdump.exe

Files

IPTOOLKIT-main.zip
.zip
IPTOOLKIT-main/IPTOOLKIT.bat
.bat .vbs
IPTOOLKIT-main/README.md
IPTOOLKIT-main/files/PortScanner.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\boris\Downloads\PortScanner-master\PortScanner-master\obj\Debug\PortScanner.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IPTOOLKIT-main/files/arpspoof.exe
.exe windows:6 windows x86 arch:x86

db39bcfd64fb69b68c8b29c670a6f606

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Sasha\Programming\arpspoof\Release\arpspoof.pdb

Imports

kernel32

CreateFileW
WideCharToMultiByte
SetFilePointerEx
HeapReAlloc
GetSystemDirectoryW
WriteConsoleW
SetDllDirectoryW
SetConsoleCtrlHandler
RaiseException
GetLastError
GetSystemInfo
VirtualProtect
VirtualQuery
FreeLibrary
GetModuleHandleW
GetProcAddress
LoadLibraryExA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetStdHandle
WriteFile
GetModuleFileNameA
MultiByteToWideChar
GetCommandLineA
GetCommandLineW
GetACP
CompareStringW
LCMapStringW
HeapAlloc
HeapFree
GetFileType
GetStringTypeW
CloseHandle
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
GetProcessHeap
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapSize
DecodePointer

ws2_32

htons
inet_addr

iphlpapi

ResolveIpNetEntry2
GetAdaptersAddresses

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IPTOOLKIT-main/files/banner.txt
IPTOOLKIT-main/files/rpcdump.exe
.exe windows:4 windows x86 arch:x86

2b3e005a8cabe02178143b87ae97ba47

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

RpcBindingFromStringBindingA
RpcStringBindingComposeA
RpcBindingFree
RpcStringFreeA
RpcMgmtEpEltInqBegin
RpcBindingToStringBindingA
RpcMgmtEpEltInqNextA
UuidToStringA
RpcIfIdVectorFree
RpcStringBindingParseA
RpcMgmtInqIfIds
RpcMgmtStatsVectorFree
RpcMgmtInqServerPrincNameA
RpcMgmtInqStats

kernel32

FreeEnvironmentStringsW
WideCharToMultiByte
GetStringTypeW
GetStringTypeA
LCMapStringA
MultiByteToWideChar
LCMapStringW
CloseHandle
SetFilePointer
SetStdHandle
GetProcAddress
GetOEMCP
LoadLibraryA
GetCPInfo
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapAlloc
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FlushFileBuffers
GetACP
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
GetLastError

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 9KB - Virtual size: 8KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

db39bcfd64fb69b68c8b29c670a6f606

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

ws2_32

iphlpapi

Sections

.text Size: 88KB - Virtual size: 88KB

.rdata Size: 28KB - Virtual size: 28KB

.data Size: 2KB - Virtual size: 68KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 5KB - Virtual size: 4KB

2b3e005a8cabe02178143b87ae97ba47

Headers

File Characteristics

Imports

rpcrt4

kernel32

Sections

.text Size: 20KB - Virtual size: 16KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 8KB

.text
Size: 9KB - Virtual size: 8KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 88KB - Virtual size: 88KB

.rdata
Size: 28KB - Virtual size: 28KB

.data
Size: 2KB - Virtual size: 68KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 5KB - Virtual size: 4KB

.text
Size: 20KB - Virtual size: 16KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 8KB