neoblox-master[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

neoblox-master.zip
Size

19.6MB
MD5

02191aafb3e6b2585ab3429a4a7efe74
SHA1

4c65a8761b4685b77d6f2e18703b777bcd111428
SHA256

b4955f52aae13f7f9be57877ad7e36d835e88458c20d1130dfcdcb25f7c15219
SHA512

71445b34c6905000dd32f7cf960475eb50d3ee7dbe2253e0c9b9e757403f629e153118060f5d9c806389a9504b2e6afda49c2761d441906ed69d6a1263a68df2
SSDEEP

393216:hCn+/2S6oO0ORMUgFL642LljdxT4mxXrH+Bs41zYnYZT:hC+PXjrUgFLxejz57eBx1zkYZT

Score

3^/10

Malware Config

Signatures

Unsigned PE 6 IoCs

Checks for missing Authenticode signature.

resource
unpack001/neoblox-master/DLLs/EasyExploits.dll
unpack001/neoblox-master/DLLs/KrnlAPI.dll
unpack001/neoblox-master/DLLs/ScintillaNET.dll
unpack001/neoblox-master/DLLs/Siticone.UI.dll
unpack001/neoblox-master/DLLs/WeAreDevs_API.dll
unpack001/neoblox-master/DLLs/wmp.dll

Files

neoblox-master.zip
.zip
neoblox-master/.editorconfig
neoblox-master/.gitattributes
neoblox-master/.gitignore
neoblox-master/App.config
.xml
neoblox-master/DLLs/EasyExploits.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\Users\danie\OneDrive\ee api\EasyExploits\obj\Debug\EasyExploits.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
neoblox-master/DLLs/KrnlAPI.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\_King_\source\repos\KrnlAPI\KrnlAPI\obj\Release\KrnlAPI.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
neoblox-master/DLLs/ScintillaNET.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\jacob\Documents\Projects\ScintillaNET\src\ScintillaNET\obj\Release\ScintillaNET.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
neoblox-master/DLLs/Siticone.UI.dll
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 769KB - Virtual size: 768KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
neoblox-master/DLLs/WeAreDevs_API.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\burne\Documents\GitHub\Exploit-API\WeAreDevs_API\obj\Release\WeAreDevs_API.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 602KB - Virtual size: 602KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
neoblox-master/DLLs/wmp.dll
.dll regsvr32 windows:10 windows x64 arch:x64

36b9b1016d85dfa1274194edc17cae71

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

wmp.pdb

Imports

api-ms-win-crt-string-l1-1-0

strcmp
wcscspn
wcspbrk
memset
strncmp
wcscmp
wcsncpy
wcsnlen
strnlen
wcsspn
wcsncmp

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e

api-ms-win-crt-time-l1-1-0

clock
_time32

api-ms-win-crt-private-l1-1-0

_o__wtof
_o__wtoi
_o__wtoi64
_o__wtol
_o_atan2
_o_atoi
_o_bsearch
_o_calloc
_o_ceil
_o_cos
_o_exit
_o_exp
_o_floor
_o_free
_o_isdigit
_o_isspace
_o_iswalnum
_o_iswalpha
_o_iswascii
_o_iswcntrl
_o_iswdigit
_o_iswprint
_o_iswspace
_o_iswxdigit
_o_isxdigit
_o_ldexp
_o_log
_o_malloc
_o_memcpy_s
_o_pow
_o_powf
_o_qsort
_o_qsort_s
_o_rand
_o_rand_s
_o_realloc
_o_sin
_o_sqrt
_o_srand
_o_strncpy_s
_o_terminate
_o_tolower
_o_toupper
_o_towlower
_o_towupper
_o_wcscat_s
_o_wcscpy_s
_o_wcsftime
_o_wcsncpy_s
_o_wcstod
_o_wcstok_s
_o_wcstol
memmove
_o_wcstoul
wcsrchr
wcsstr
wcschr
__CxxFrameHandler3
_o__seh_filter_dll
_o__register_onexit_function
_o__purecall
_o__memicmp
_o__wsplitpath_s
_o__ltow
_o__localtime32
_o__wcsupr_s
_o__wcstoui64
_o__itow_s
_o__itow
_o__itoa_s
_o__wcsnicmp
strchr
_o__wcslwr
_o__wcsicoll
_o__wcsicmp
_o__ultow_s
_o__strnicmp
_o__stricmp
_o__invalid_parameter_noinfo_noreturn
_o__invalid_parameter_noinfo
_o__initialize_onexit_table
_o__initialize_narrow_environment
_o__execute_onexit_table
_o__errno
_o__endthread
_o__difftime32
_o__crt_atexit
_o__configure_narrow_argv
_o__cexit
_o__callnewh
_o__beginthreadex
_o__beginthread
_o___stdio_common_vswscanf
_o___stdio_common_vswprintf_s
_o___stdio_common_vswprintf
_o___stdio_common_vsprintf
_o___stdio_common_vsnwprintf_s
_o___stdio_common_vsnprintf_s
_o___stdio_common_vfwprintf
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
_o___acrt_iob_func
__C_specific_handler
__std_terminate
__CxxFrameHandler4
_CxxThrowException
memcmp
memcpy

ntdll

RtlNtStatusToDosError
RtlGetPersistedStateLocation
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind

kernel32

EncodePointer
HeapAlloc
DecodePointer
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
ResetEvent
WaitForSingleObjectEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
FreeLibraryAndExitThread
GetUserDefaultLCID
CompareStringOrdinal
MoveFileW
GetFileSize
WideCharToMultiByte
GetLocaleInfoW
CeipIsOptedIn
GlobalAlloc
GlobalFree
GetExitCodeThread
GetLocalTime
GetVolumeInformationW
GetTickCount64
SetThreadExecutionState
GetCurrentDirectoryW
WriteFile
Sleep
TerminateThread
GlobalMemoryStatusEx
WaitForMultipleObjects
DeviceIoControl
SetErrorMode
GetComputerNameW
ReleaseSemaphore
CreateSemaphoreW
ExitThread
GetThreadPriority
ExpandEnvironmentStringsW
GetComputerNameExW
SetFilePointer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
LoadLibraryExA
GetThreadLocale
GetFileAttributesExW
HeapFree
GetProcessHeap
GetDriveTypeW
GlobalUnlock
GlobalLock
FindPackagesByPackageFamily
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CreateThread
GetDiskFreeSpaceExW
SetFileAttributesW
GetCurrentProcessId
DeleteFileW
GetTickCount
FindClose
FindNextFileW
FindFirstFileW
FindCloseChangeNotification
FindNextChangeNotification
FindFirstChangeNotificationW
CreateEventW
WaitForSingleObject
DebugBreak
OpenEventW
LocalFree
FormatMessageW
GetUserDefaultUILanguage
SetThreadPriority
SetEvent
lstrlenW
GetVersionExW
GetCurrentThread
RaiseFailFastException
GetCurrentProcess
VirtualFree
GetCurrentThreadId
SetLastError
CopyFileW
SystemTimeToFileTime
GetSystemTime
LockResource
lstrcpyW
HeapDestroy
DisableThreadLibraryCalls
HeapSetInformation
ReadFile
CreateFileW
GetShortPathNameW
FindResourceW
LoadLibraryW
MulDiv
CloseHandle
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetModuleFileNameW
FindResourceExW
LoadResource
SizeofResource
MultiByteToWideChar
GetSystemInfo
VirtualQuery
VirtualAlloc
VirtualProtect
lstrcpynW
lstrcmpiW
GetModuleHandleW
LoadLibraryExW
GetProcAddress
GetLastError
FreeLibrary
BindIoCompletionCallback
CreateToolhelp32Snapshot
Process32NextW
CloseThreadpoolTimer
CreateThreadpoolTimer
CompareFileTime
FileTimeToSystemTime
CreateMutexW
ReleaseMutex
CopyFileExW
LocalFileTimeToFileTime
CreateDirectoryW
RemoveDirectoryW
GetDateFormatW
GetTimeFormatW
GetVersionExA
ExitProcess
QueryPerformanceFrequency
lstrcmpW
LocalAlloc
DuplicateHandle
HeapCreate
HeapReAlloc
HeapSize
GetLocaleInfoA
GetFileInformationByHandle
GetVolumePathNameW
GetVolumeNameForVolumeMountPointW
GetFileType
SetEndOfFile
FlushFileBuffers
OpenMutexW
OpenFileMappingW
GetFullPathNameW
GetLongPathNameW
GetTempFileNameW
IsValidLocale
GetProcessTimes
OpenThread
LCMapStringW
GlobalMemoryStatus
GetTempPathW
GetFileAttributesW
GetPrivateProfileStringW
OutputDebugStringW
MoveFileExW
InitializeCriticalSectionEx
GetDiskFreeSpaceW
FreeEnvironmentStringsW
GetEnvironmentStringsW
FreeEnvironmentStringsA
lstrcatW
FileTimeToLocalFileTime
GetNumberFormatW
GetModuleHandleA
GetACP
GetModuleFileNameA
CreateProcessW
GetExitCodeProcess
Process32FirstW
DelayLoadFailureHook
ResolveDelayLoadedAPI
FindFirstFileExW
GetOverlappedResult
ReadDirectoryChangesW
GetProcessMitigationPolicy
ProcessIdToSessionId
FindNLSString
TryEnterCriticalSection
SetFilePointerEx
WaitForMultipleObjectsEx
TzSpecificLocalTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GlobalDeleteAtom
GlobalAddAtomW
GlobalSize
GlobalReAlloc
GetSystemPowerStatus
lstrlenA
GetTimeZoneInformation

oleaut32

SysFreeString
VarUI4FromStr
VariantChangeType
VariantClear
SysStringLen
SysAllocStringLen
SysAllocString
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SysStringByteLen
SysAllocStringByteLen
SafeArrayGetElemsize
SafeArrayGetDim
OleCreatePropertyFrame
VariantChangeTypeEx
SafeArrayCreateVectorEx
VariantCopy
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
OleCreatePropertyFrameIndirect
VariantInit
SetErrorInfo
VarCmp
VariantTimeToSystemTime
DispCallFunc
VarR8FromUI8
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayPutElement
SafeArrayCreateVector
SystemTimeToVariantTime
CreateErrorInfo
SafeArrayGetElement
SafeArrayGetUBound
SafeArrayGetLBound

api-ms-win-core-registry-l2-1-0

RegDeleteKeyW
RegEnumKeyW

api-ms-win-core-com-l1-1-0

CoMarshalInterface
CoUnmarshalInterface
CoReleaseMarshalData
CoSetProxyBlanket
StringFromIID
CoRegisterClassObject
GetHGlobalFromStream
StringFromCLSID
CoRevokeClassObject
CoCreateFreeThreadedMarshaler
CoCreateGuid
PropVariantCopy
IIDFromString
CoWaitForMultipleHandles
CoTaskMemRealloc
CoGetTreatAsClass
CoFreeUnusedLibraries
CLSIDFromString
CoTaskMemFree
CLSIDFromProgID
CreateStreamOnHGlobal
StringFromGUID2
CoGetInterfaceAndReleaseStream
CoTaskMemAlloc
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoDisconnectObject
PropVariantClear
CoInitializeEx
CoGetStandardMarshal
CoUninitialize
CoGetClassObject

api-ms-win-core-string-l2-1-0

CharNextW
CharPrevW
CharLowerW

api-ms-win-core-registry-l1-1-0

RegQueryValueExW
RegDeleteValueW
RegNotifyChangeKeyValue
RegCreateKeyExW
RegSetValueExW
RegEnumValueW
RegQueryInfoKeyW
RegGetValueW
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey

api-ms-win-eventing-classicprovider-l1-1-0

TraceMessage
RegisterTraceGuidsW
UnregisterTraceGuids
GetTraceEnableFlags
GetTraceLoggerHandle
TraceEvent
GetTraceEnableLevel

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer
EventEnabled
EventSetInformation
EventUnregister
EventRegister
EventWrite

api-ms-win-core-libraryloader-l1-2-0

LoadStringA
LoadStringW
GetModuleHandleExW
FreeResource

api-ms-win-core-version-l1-1-1

GetFileVersionInfoW
GetFileVersionInfoSizeW

api-ms-win-core-version-l1-1-0

VerQueryValueW

api-ms-win-mm-time-l1-1-0

timeEndPeriod
timeGetTime
timeBeginPeriod

api-ms-win-core-shlwapi-legacy-l1-1-0

PathFileExistsW
PathRemoveBackslashW
PathFindExtensionW
PathRemoveFileSpecW

api-ms-win-shcore-comhelpers-l1-1-0

IUnknown_QueryService

api-ms-win-security-cryptoapi-l1-1-0

CryptAcquireContextW
CryptGenRandom

api-ms-win-core-url-l1-1-0

UrlCombineW
UrlCanonicalizeW

api-ms-win-core-com-private-l1-1-0

CoRegisterMessageFilter

api-ms-win-security-base-l1-1-0

GetAce
EqualSid
GetAclInformation
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
MakeSelfRelativeSD
AllocateAndInitializeSid
DuplicateTokenEx
SetFileSecurityW
GetSecurityDescriptorLength
IsValidSecurityDescriptor
GetSecurityDescriptorControl
CreateWellKnownSid
MapGenericMask
GetTokenInformation
FreeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
AccessCheck
GetWindowsAccountDomainSid
GetFileSecurityW

api-ms-win-security-provider-l1-1-0

GetNamedSecurityInfoW
SetEntriesInAclW
SetNamedSecurityInfoW

api-ms-win-shcore-stream-l1-1-0

SHCreateStreamOnFileW

api-ms-win-core-perfcounters-l1-1-0

PerfStopProvider
PerfSetCounterSetInfo
PerfStartProviderEx

api-ms-win-core-sysinfo-l2-1-0

GetUserNameW

api-ms-win-core-processthreads-l1-1-0

CreateProcessAsUserW
TlsSetValue
CreateProcessA
OpenThreadToken
OpenProcessToken
TlsGetValue

api-ms-win-core-stringansi-l1-1-0

CharNextA

api-ms-win-core-shlwapi-obsolete-l1-1-0

StrStrIA

api-ms-win-shcore-registry-l1-1-0

SHDeleteKeyW

wmvcore

WMValidateData
WMCreateSyncReader
WMCreateWriter
WMIsContentProtected
WMCreateReader
WMCreateEditor
WMCreateProfileManager

api-ms-win-core-synch-l1-1-0

CreateSemaphoreExW
CreateEventExW
OpenSemaphoreW
CreateMutexExW

api-ms-win-core-localization-l1-2-0

GetUserDefaultLocaleName
GetGeoInfoW
LocaleNameToLCID
GetSystemDefaultLCID
GetUserDefaultLangID
GetUserGeoID

api-ms-win-core-sysinfo-l1-2-0

GetProductInfo

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory
RoActivateInstance

api-ms-win-core-sysinfo-l1-1-0

GetVersion
GetWindowsDirectoryW
GetSystemDirectoryW

api-ms-win-core-processthreads-l1-1-1

OpenProcess

api-ms-win-core-string-l1-1-0

GetStringTypeExW
CompareStringW

api-ms-win-core-threadpool-l1-2-0

SetThreadpoolWait
CreateThreadpoolWait
CloseThreadpoolWait
SetThreadpoolThreadMaximum
SetThreadpoolThreadMinimum
WaitForThreadpoolWorkCallbacks
CloseThreadpoolWork
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpool
CreateThreadpool
WaitForThreadpoolWaitCallbacks

api-ms-win-core-file-l1-1-0

GetFileSizeEx
QueryDosDeviceW

api-ms-win-core-localization-l1-2-1

EnumSystemLocalesEx

gdiplus

GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipGetPropertyItemSize
GdipGetImagePalette
GdipGetImagePaletteSize
GdipFillPath
GdipGetImageHorizontalResolution
GdipGetImagePixelFormat
GdipGetPropertyItem
GdipLoadImageFromStream
GdipCloneImage
GdipAlloc
GdipDisposeImage
GdipSetSolidFillColor
GdipImageRotateFlip
GdipCreateHBITMAPFromBitmap
GdipSetPixelOffsetMode
GdipSetInterpolationMode
GdipDrawImageRectRectI
GdipCreateMatrix
GdipDeleteMatrix
GdipTranslateMatrix
GdipRotateMatrix
GdipCreateHICONFromBitmap
GdipDrawImageI
GdipDeleteGraphics
GdipDrawImageRectI
GdiplusShutdown
GdipGetImageEncodersSize
GdipSetWorldTransform
GdipGetDC
GdipSetLineBlend
GdipFillRectangleI
GdipCreateBitmapFromHBITMAP
GdipCreatePath
GdipDeletePath
GdipAddPathRectangleI
GdipCreatePathGradientFromPath
GdipSetPathGradientCenterColor
GdipSetPathGradientCenterPointI
GdipSetPathGradientFocusScales
GdipGetPropertySize
GdipLoadImageFromFile
GdipCreateBitmapFromResource
GdipCreateBitmapFromStream
GdipSetLineSigmaBlend
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipSaveImageToStream
GdipGetTextureTransform
GdipTranslateTextureTransform
GdipGetImageEncoders
GdipResetTextureTransform
GdipCreateFromHDC
GdipReleaseDC
GdipSetTextureTransform
GdipCreateTexture
GdipSetTextureWrapMode
GdipTranslateWorldTransform
GdipGetImageWidth
GdipDrawCachedBitmap
GdipCreateCachedBitmap
GdipCreateSolidFill
GdipGetAllPropertyItems
GdipCreatePen1
GdipDeletePen
GdipDrawRectangleI
GdipGetImageVerticalResolution
GdipBitmapSetResolution
GdipCreateBitmapFromHICON
GdipGetImageHeight
GdipCreateBitmapFromGdiDib
GdipSaveImageToFile
GdipSetPropertyItem
GdiplusStartup
GdipCreateBitmapFromScan0
GdipSetSmoothingMode
GdipDeleteBrush
GdipCloneBrush
GdipCreateImageAttributes
GdipGetImageGraphicsContext
GdipGetImageRawFormat
GdipGetPathGradientPointCount
GdipSetPathGradientSurroundColorsWithCount
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipSetCompositingQuality
GdipDeleteCachedBitmap
GdipSetPathGradientBlend
GdipCreateLineBrushFromRectI
GdipFree

gdi32

Polyline
DPtoLP
DeleteObject
GetDeviceCaps
CreateFontIndirectW
SelectObject
GetTextMetricsW
GetTextExtentPointW
RestoreDC
DeleteDC
SetViewportOrgEx
SetWindowOrgEx
SetMapMode
SaveDC
LPtoDP
CreateDCW
CreateRectRgnIndirect
CreateCompatibleDC
GetClipBox
OffsetViewportOrgEx
GetStockObject
ExcludeClipRect
RectVisible
SetLayout
SetStretchBltMode
SetBkMode
SetTextColor
CreateFontW
GetObjectW
CreateCompatibleBitmap
CreateRectRgn
CombineRgn
OffsetRgn
StretchBlt
StretchDIBits
CreateSolidBrush
SetRectRgn
GetRgnBox
PtInRegion
SetBkColor
PatBlt
IntersectClipRect
CreatePen
Rectangle
GetLayout
BitBlt
GetObjectType
GetBkColor
ExtTextOutW
SetTextAlign
TextOutW
GetObjectA
GetDIBColorTable
CreateDIBSection
CreateICW
SetDIBits
GetDIBits
SetDIBitsToDevice
ExtCreateRegion
SetDIBColorTable
ExtSelectClipRgn
GetRegionData
GetTextAlign
SelectPalette
RealizePalette
GetPaletteEntries
SetPaletteEntries
GetSystemPaletteEntries
CreatePalette
SelectClipRgn
GdiFlush
DeleteMetaFile
CloseMetaFile
SetWindowExtEx
CreateMetaFileW
Ellipse
MoveToEx
LineTo
GetTextColor
SetTextCharacterExtra
CreateBrushIndirect
RoundRect
OffsetWindowOrgEx
GetTextExtentPoint32W

user32

DrawTextExW
SetGestureConfig
CloseGestureInfoHandle
SendMessageCallbackW
SetMenuInfo
SetMenuItemBitmaps
DrawMenuBar
GetScrollRange
GetWindowDC
SystemParametersInfoA
CopyAcceleratorTableW
GetDpiForWindow
UpdateLayeredWindowIndirect
TrackMouseEvent
GetScrollPos
GetQueueStatus
RegisterClipboardFormatW
SystemParametersInfoForDpi
IsMenu
EnumDisplayDevicesW
SetPropW
GetPropW
BringWindowToTop
GetClassLongPtrW
ShowCursor
GetShellWindow
SetLayeredWindowAttributes
EnumDisplayMonitors
RegisterWindowMessageA
CheckRadioButton
GetDlgItemInt
ShowScrollBar
GetScrollBarInfo
GetDlgItemTextW
EnumChildWindows
IsDlgButtonChecked
CheckDlgButton
GetMessageExtraInfo
NotifyWinEvent
GetWindowInfo
CloseWindow
EnumWindows
SetClassLongW
GetDoubleClickTime
CloseClipboard
GetClipboardData
OpenClipboard
GetClipboardOwner
DrawEdge
GetNextDlgTabItem
WindowFromDC
GetScrollInfo
GetMessageTime
SetClassLongPtrW
DrawFocusRect
GetMessagePos
InflateRect
MonitorFromRect
IsZoomed
GetSystemMenu
GetSysColor
MsgWaitForMultipleObjectsEx
InSendMessage
PostThreadMessageW
GetClassNameW
SendMessageTimeoutA
SendMessageTimeoutW
DestroyCursor
MonitorFromWindow
GetDesktopWindow
SetParent
GetClassInfoW
MsgWaitForMultipleObjects
SendDlgItemMessageW
SetDlgItemInt
SetDlgItemTextW
EndDialog
LoadIconW
VkKeyScanW
GetDlgCtrlID
DrawTextW
GetSystemMetricsForDpi
GetWindowLongPtrW
SetWindowLongPtrW
GetDC
ReleaseDC
GetDialogBaseUnits
EndPaint
GetClientRect
BeginPaint
GetFocus
IsChild
IsDialogMessageW
WinHelpW
MoveWindow
ShowWindow
IsWindow
RegisterClassExW
GetClassInfoExW
wsprintfW
LoadCursorW
DestroyWindow
DefWindowProcW
CreateWindowExW
GetDlgItem
SendMessageW
CallWindowProcW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
MessageBoxW
LoadImageW
GetMenuItemCount
SetMenuDefaultItem
GetMenuItemInfoW
SetMenuItemInfoW
PostMessageW
GetWindowRect
PtInRect
GetActiveWindow
LoadMenuW
LoadAcceleratorsW
SetWindowPos
InvalidateRect
GetWindowLongW
PostQuitMessage
SetFocus
MapWindowPoints
MessageBeep
RemoveMenu
AppendMenuW
TrackPopupMenuEx
DestroyMenu
CreatePopupMenu
MonitorFromPoint
GetMonitorInfoW
GetParent
IsWindowVisible
SetWindowLongW
FillRect
SetWindowRgn
OffsetRect
EqualRect
IntersectRect
DestroyAcceleratorTable
UnionRect
GetKeyState
UnregisterClassW
CopyRect
InvalidateRgn
GetCapture
SetCapture
ReleaseCapture
GetForegroundWindow
GetCursorPos
SetCursor
SystemParametersInfoW
ClientToScreen
SetRectEmpty
IsRectEmpty
SetRect
GetSubMenu
TrackPopupMenu
EnableWindow
SetWindowTextW
UpdateWindow
CreateDialogParamW
GetWindowTextLengthW
GetWindowTextW
SetTimer
FrameRect
KillTimer
IsWindowUnicode
IsWindowEnabled
AdjustWindowRectEx
IsIconic
GetWindowPlacement
GetAsyncKeyState
SetActiveWindow
SetForegroundWindow
RedrawWindow
GetWindowThreadProcessId
GetTopWindow
GetWindow
GetMenuStringW
GetMenuItemID
EnableMenuItem
DeleteMenu
CheckMenuRadioItem
InsertMenuW
CreateMenu
CheckMenuItem
GetIconInfo
GetSysColorBrush
DrawIconEx
InsertMenuItemW
DestroyIcon
GetMenuInfo
GetAncestor
FindWindowW
SetThreadDpiAwarenessContext
AllowSetForegroundWindow
DialogBoxParamW
GetMenu
GetWindowRgn
CallNextHookEx
FindWindowExW
GetClassLongW
SetWindowPlacement
SetMenu
RegisterClassW
RegisterWindowMessageW
ChangeWindowMessageFilterEx
SetWindowsHookExW
UnhookWindowsHookEx
TranslateAcceleratorW
GetUpdateRect
GetGestureInfo
GetSystemMetrics
ValidateRect

ole32

WriteClassStm
CoAllowSetForegroundWindow
IsAccelerator
OleRegGetUserType
CreateDataAdviseHolder
DoDragDrop
RevokeDragDrop
RegisterDragDrop
OleSaveToStream
OleLoadFromStream
CreateBindCtx
CoInitialize
ReleaseStgMedium
GetRunningObjectTable
OleRegEnumVerbs
CreateOleAdviseHolder
OleRegGetMiscStatus

dwmapi

DwmIsCompositionEnabled

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-core-featurestaging-l1-1-0

UnsubscribeFeatureStateChangeNotification
RecordFeatureUsage
SubscribeFeatureStateChangeNotification

bcrypt

BCryptDestroyHash
BCryptCloseAlgorithmProvider
BCryptFinishHash
BCryptGetProperty
BCryptDestroyKey
BCryptVerifySignature
BCryptImportKeyPair
BCryptHashData
BCryptOpenAlgorithmProvider
BCryptCreateHash

mfperfhelper

ord1
ord101
ord58
ord100

api-ms-win-core-io-l1-1-1

CancelIo

api-ms-win-core-com-l1-1-2

CoFileTimeNow

api-ms-win-core-io-l1-1-0

CancelIoEx

api-ms-win-crt-math-l1-1-0

sqrtf
sinf
tanf
cosf
logf

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 7.8MB - Virtual size: 7.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGELK
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 334KB - Virtual size: 334KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 824KB - Virtual size: 824KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
neoblox-master/FadeForm.cs
neoblox-master/Neoblox Icon.ico
neoblox-master/Neoblox.Designer.cs
neoblox-master/Neoblox.cs
.js
neoblox-master/Neoblox.resx
.vbs
neoblox-master/Program.cs
neoblox-master/Properties/AssemblyInfo.cs
neoblox-master/Properties/Resources.Designer.cs
.vbs
neoblox-master/Properties/Resources.resx
.vbs
neoblox-master/Properties/Settings.Designer.cs
neoblox-master/Properties/Settings.settings
neoblox-master/README.md
neoblox-master/ScriptHub.Designer.cs
neoblox-master/ScriptHub.cs
.js
neoblox-master/ScriptHub.resx
.vbs
neoblox-master/WinAPI.cs
neoblox-master/app.manifest
neoblox-master/icon-stuff/Logo in executor.png
.png
neoblox-master/icon-stuff/Logo in executor.psd
neoblox-master/icon-stuff/Neoblox Icon.ico
neoblox-master/icon-stuff/Neoblox Logo (Resize for executor).png
.png
neoblox-master/icon-stuff/Neoblox Logo (Social).png
.png
neoblox-master/icon-stuff/Neoblox Logo.png
.png
neoblox-master/icon-stuff/Neoblox Logo.psd
neoblox-master/icon-stuff/neoblox-icon.psd
neoblox-master/lightweightNeoblox/App.config
neoblox-master/lightweightNeoblox/Neoblox Icon.ico
neoblox-master/lightweightNeoblox/Program.cs
neoblox-master/lightweightNeoblox/Properties/AssemblyInfo.cs
neoblox-master/lightweightNeoblox/Properties/Resources.Designer.cs
.vbs
neoblox-master/lightweightNeoblox/Properties/Resources.resx
.vbs
neoblox-master/lightweightNeoblox/Properties/Settings.Designer.cs
neoblox-master/lightweightNeoblox/Properties/Settings.settings
neoblox-master/lightweightNeoblox/app.manifest
neoblox-master/lightweightNeoblox/lightweightNeoblox.Designer.cs
neoblox-master/lightweightNeoblox/lightweightNeoblox.cs
.js
neoblox-master/lightweightNeoblox/lightweightNeoblox.csproj
neoblox-master/lightweightNeoblox/lightweightNeoblox.resx
.vbs
neoblox-master/neoblox.csproj
neoblox-master/neoblox.sln
neoblox-master/neobloxBootstrapper/App.config
neoblox-master/neobloxBootstrapper/Neoblox Icon.ico
neoblox-master/neobloxBootstrapper/Program.cs
neoblox-master/neobloxBootstrapper/Properties/AssemblyInfo.cs
neoblox-master/neobloxBootstrapper/neobloxBootstrapper.csproj
neoblox-master/packages.config

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 8KB - Virtual size: 7KB

.rsrc Size: 1024B - Virtual size: 920B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rsrc Size: 1024B - Virtual size: 872B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 769KB - Virtual size: 768KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 602KB - Virtual size: 602KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

36b9b1016d85dfa1274194edc17cae71

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-private-l1-1-0

ntdll

kernel32

oleaut32

api-ms-win-core-registry-l2-1-0

api-ms-win-core-com-l1-1-0

api-ms-win-core-string-l2-1-0

api-ms-win-core-registry-l1-1-0

api-ms-win-eventing-classicprovider-l1-1-0

api-ms-win-eventing-provider-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-version-l1-1-1

.text
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 1024B - Virtual size: 920B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 1.2MB - Virtual size: 1.2MB

.rsrc
Size: 1024B - Virtual size: 872B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 1.3MB - Virtual size: 1.3MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 769KB - Virtual size: 768KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 602KB - Virtual size: 602KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 7.8MB - Virtual size: 7.8MB

PAGELK
Size: 5KB - Virtual size: 4KB

.rdata
Size: 1.8MB - Virtual size: 1.8MB

.data
Size: 103KB - Virtual size: 169KB

.pdata
Size: 334KB - Virtual size: 334KB

.didat
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 824KB - Virtual size: 824KB

.reloc
Size: 102KB - Virtual size: 101KB