revengerat | Revenge-RATv0[.]32[.]zip

resource	yara_rule
static1/unpack001/Revenge-RAT v0.3/Revenge-RAT v0.3/Client.exe	revengerat

resource	yara_rule
static1/unpack001/Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/Aut2Exe/upx.exe	upx

resource
unpack001/Revenge-RAT v0.3/Revenge-RAT v0.3/AForge.Video.DirectShow.dll
unpack001/Revenge-RAT v0.3/Revenge-RAT v0.3/AForge.Video.dll
unpack001/Revenge-RAT v0.3/Revenge-RAT v0.3/Client.exe
unpack001/Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/AHK/Ahk2Exe.exe
unpack001/Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/AHK/AutoHotkeySC.bin
unpack001/Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/AHK/Unicode 32-bit.bin
unpack001/Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/Aut2Exe/upx.exe
unpack001/Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/GoRC.exe
unpack001/Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/Resource Hacker.exe
unpack001/Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/dotNET_Reactor.exe
unpack001/Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/mpress.exe
unpack001/Revenge-RAT v0.3/Revenge-RAT v0.3/FastColoredTextBox.dll
unpack001/Revenge-RAT v0.3/Revenge-RAT v0.3/IconLib.dll
unpack001/Revenge-RAT v0.3/Revenge-RAT v0.3/Plugin Compiler.exe
unpack003/CH.dll
unpack004/FM.dll
unpack005/KE.dll
unpack006/MC.dll
unpack007/PA.dll
unpack008/PW.dll
unpack009/RD.dll
unpack001/Revenge-RAT v0.3/Revenge-RAT v0.3/Revenge-RAT v0.3.exe
unpack001/Revenge-RAT v0.3/Revenge-RAT v0.3/Theme Compiler.exe
unpack001/Revenge-RAT v0.3/Revenge-RAT v0.3/WinMM.Net.dll

Revenge-RATv0.32.zip

SHA256 751ab6c224bfc8714a9f5704dbbf69936864907d73bb26ad62e452d17451cb74
MD5 1a3126dd39360ad9288b4257ca479a05
SHA1 f55e35dc78e9812b085b95d35c2c7c274b41ce8e
SHA512 dd6fbb7725441cd0639739eefbc3f7cb06b6d40287cd53d05e20da25086e5f3263e40015e90a6c920fdf0f4a9c4ada8f237231ef2a0170d254dcb3e6a4e6e507
SSDEEP 393216:ErrXrrjnSRIerLSVs6uD4FFlW5Z3K+N0ghpkbj24kEM:ErjrXte6wDEl43K+Nrhpkf5K
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/AForge.Video.DirectShow.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 643a7f9754d90d475db3f84af7b254a64dd555ced0f039aaa4f08b5b27ab4fdb
MD5 2343899ea6b3dff06a6db2f0fbd86406
SHA1 9a578eb8fc1d0b9d12adc6a0fcc39ee822c5fd0c
SHA512 0ed7f9d8630dd9e946b9d3c22eaa84bcfbdfc8c8f2dccc877f47a176789ce70118f670ee23d820c6a42a2b4099b9088aaae1da8a957bded12224632440bda5c6
SSDEEP 768:0/Xil9fEWM0yVnO9Y5UTOSsxrC2dkbpN+2MvkYr:0gM0G5UTOtubpN+9MYr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

41806

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\Andrew\AForge.NET\trunk\Sources\Video.DirectShow\obj\Release\AForge.Video.DirectShow.pdb

Revenge-RAT v0.3/Revenge-RAT v0.3/AForge.Video.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 311724ff73b331cd6de0649b01923f7e43d168aa5b1e7f031b2b175148062757
MD5 a614d58e17ba34826b59c4942c32f078
SHA1 c16382c25de65a9ed84b0f87288e473e62ade7da
SHA512 dec8564442dbba55f60bc74127c4118347b014ecc776f54c257d0e1e5cd3b80df635003da91cb906671ad3912d44de64548f62dc29ca3dd6de8d73ec1a1cbad9
SSDEEP 384:FgTJd+C0VUZpdoXAlFMJtirnLiDl1B9yf0G:yqalLiTB9y8G
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

22478

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\Andrew\AForge.NET\trunk\Sources\Video\obj\Release\AForge.Video.pdb

Revenge-RAT v0.3/Revenge-RAT v0.3/Client.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 0b3472c651db8cc9991a92097c22dc4cab8467aff96591f76fb89bc3af8eadaa
MD5 010aabdc4dc52b82d3c6945aaefd22ec
SHA1 8f50c8e53c7da15308b57b399c22ab7b97333f5a
SHA512 609b0a617e4d6a168497b6aa8173b43690f57aefcf48eb3ce06540e7b9cde10b9e741c5d7b9eef936ab3d7857d155189902d0ab7b89784f0b61b74c10196bc0d
SSDEEP 384:X/5gk7lVzF3smf9oDPlMNcLlb5sVKhyLF5Ct:X/5gk7lVZjclMNEio
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

RevengeRat Executable

stealer
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

23998

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Revenge-RAT v0.3/Revenge-RAT v0.3/Config.XML

SHA256 5b2bc9a5d778db369626003e450f9d102aa57680ac86b7ff66c2ec0f70927c1e
MD5 5471864b5cf096360b93c49620137a36
SHA1 328ca4e111c260281551409b652b30c10c4e3f0f
SHA512 67016b59493e80cf1960d963c599099d56022ee8de9e905a7c73e175c75808a9d9e6ae82d30de975ac73439bd4180ab8b36a40d652db4956facb971d2d6c5e85
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-04-03/3-19-15 下午.log

SHA256 c48b345f52e7698587c8fcf649e92d188d486c0517bbdb3c7fd84c50cfc86c5c
MD5 7ce6cd5f633261baf77693271cb4dacf
SHA1 d0ee0a5cfe15f3501dcd4a44a83e9722e581ceda
SHA512 dc1e78359ad81af55270c93791c8814de87ccbad17c3456b817ea41134723a4e71590c9f79e6adae2f78e0f642a60a5ec8b4dfcac2172a83ce7aa104b0f900d8
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-04-03/3-20-34 下午.log

SHA256 9b5277c0f53c9f0a07b9e1764b7424beaaa1c30853cb3616127d7b7647cfd413
MD5 a3a09e38d0bee424163a3a16584f4751
SHA1 3fdd1694f12a7c7619fa2edadbee76f280784272
SHA512 06a8ffc93807ef2fb3203c4137bdd69473649d63a57067058531fd74f7d0b6f1212041710f2ece815196291f073f67974161512b175f94c7d2ea5ec8c5a6c925
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-04-03/3-21-49 下午.log

SHA256 7123ed70a3137c6ed9c82c4945a8336aeef0b61a32aea32ee63f000ea5c4a47f
MD5 1128bce3cf1b919703da91a483919b7e
SHA1 fef2b715e4017686924508ea1dc9e6f3ac45483c
SHA512 bde395576b072a8d6cc274d81244644fb396a288d51d577fc65e289d936552d30ee6748c9d74ebb4a49f6ef6156311040454cfb7425c9a005ccc33f8c00018c3
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-04-03/4-17-58 下午.log

SHA256 45a27b5705d979071aedecfd73310eec233ab8e02992d1ed5fe422bf012cb971
MD5 dfc1d6922717264286dbdfd154cafee6
SHA1 69f8a818a3f402c1a3ce762858f12c04fa958378
SHA512 0236a3c4194c5bbcac139e529cd3ba8ca95236b7410f9e9ffe889adde83c5b9172a5aa4c442acbb0cc0a3576623b28b6d43b7207d8a35b9183d939b4afa7e686
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-04-03/4-18-56 下午.log

SHA256 138b73995bd7a7afb01a1f3d185ce1443c9d634728627126169b72e078da9dd7
MD5 1e7535689adc70104266db0bc0e754d3
SHA1 6f79bdba3470906893afcdf16e333e5c79ffa97c
SHA512 5c22dc253a46fd7b245d46b0776209d5065af4bbc17c415a8939977e404674af602e8e39f815c8db4d36088752fba6cc86355b657a81cafdabaa184f5fede9f7
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-04-03/5-06-44 下午.log

SHA256 a3be3545387212aff7aba834470427281c946518e2740b9e1b0ee35168369a88
MD5 8693666da3b8d3dadd18d233414224cd
SHA1 632e7a532e4f165d2968982cc66c56dc9cb51f8d
SHA512 b5c2b8ecc4608a2a5d596832ce757271ae6c4c2dfd24a0d754c50fe0e30a46c7cd965cd30f025ab4d00547d6222893f020b7ccf44ed34a66465f54db8185240a
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-04-03/5-07-42 下午.log

SHA256 54a149efed9a8a93bc34cc9186324c1188ad164a9ef9a603f88eb49afa7bfc48
MD5 de8ce1ccc03362015a2c28aec75f5ad4
SHA1 dab950fe2089544db94f089ba654e165d2c53b6d
SHA512 1ad067289431229405e053dbd73c23dd6eaf5e1d811343b09d3e2b64b08c42983e9157e40973c6d72d631b437d0e7418840eddcc72f5b2926f3711a6a93d86a4
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-04-03/5-51-08 下午.log

SHA256 ef58fa0c0bee0e8ea1f502fdd5ca5a819aae3af51e562950f977bcc5b4b3d295
MD5 92155393917cc19114212a891e6c36b3
SHA1 f67c195973698e4156964f5df31bb2d16d45391e
SHA512 4d5220a073b0a7e106f88d4f6a6fc97f3d2dda4b2f0f3453e9ece201849a28eda2aa93b77c36947d2c7aad4158755462476275f4ba7b8d1f7a2a724330e29bc1
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-04-03/5-51-45 下午.log

SHA256 fe0d2e738e3da81689d0365e6fc5f63b23b7528ecfa07980e95b95cf46ab5ab5
MD5 6f5b37ac37def058a0572b9c14853412
SHA1 56bc8b054079d7b1f37710ca811c9fb9f03991f6
SHA512 9b89b1f933b55469e58d18e31387f896bbc1dfc48dc57dc837b413dc2cbe0bb49bebb1a329c11ff77db4365e0b756fded2629b79099c97ed55ef216df765b175
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-04-03/5-53-06 下午.log

SHA256 c314220a889d92620cf90f383d3eaca8675a0a82cf3597ee42ef2d071bbd165d
MD5 030821fe80b0373915e027ede7ab08e0
SHA1 9bb6873991abc320f7f7fdd40a6736fff1fa1fc6
SHA512 8f99b4d14c5768c138ce8961d5960df04380511f3403cf1a34893996199d1683999daf0f9e2e997d7eb26b4d72db2ca496dbfb4ed4029612064d03f48110760c
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-04-03/5-54-01 下午.log

SHA256 dc4f9d6151d023b5f49b4164d15d8e75a7636e3a77d9c03a510bcff2731a5219
MD5 41bdfe3a6ec755a82adae6de60629a48
SHA1 4b9d62650b27904e261a65b7bb466956c0aa6703
SHA512 53f3dd8c70cf19d11874a73c2f837a5fa5872af43989dc40963f300a6202e7cebb0779dcd1b825af707019afebab22a7140994f1a0a53bd894cfe1154b484762
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-04-04/11-04-02 上午.log

SHA256 b052d1628667e3057e16af5a392c1783283dabad838adfb19d1db6be59d3d178
MD5 f3ca5a155205b2058417d424b4196ecf
SHA1 4b719f6c50da57bdb5ad36ff0d9fbcf2ac4467c9
SHA512 3d6e678ad4182aa004db45372123eb979d5b98af24d0b1e308941ff2d1230e7b339009501909e7957df27dcaddd3ae4c0f04f94ecf7c35bc166c4e2a1653c426
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-04-04/11-05-14 上午.log

SHA256 cc8fa5c6da8c26180f932e676ae4c5432f8c8a4b06c44cff70fdafa42c3979cc
MD5 72647759a6990f879ac63be4c4dec68b
SHA1 c6e57744f6f1dee65f8a529f66254892cb952a7a
SHA512 a9ae13157f5af08178a957a35b4bb659487defe649e87fa5dcea80a61ff452b80ae6ee5eaf6f2419afd11c9dd358e3e2c6ae9d4123b36662673b05dcfc1074ac
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-04-04/11-06-03 上午.log

SHA256 87c28b854d7f3e38d03fe5935abfd7b66345dc21ec959718f7c54d4e85dde561
MD5 383f4d08bc33f26f1a274f2480fd7389
SHA1 774a360eb96e187d6170276c1159e98ec54b71b5
SHA512 f496a3006dc4f0c2224bed85774648e7e1d64b4156d358fd60dc04549815560111e70d280fb9ab23ea2943d498736283b82e51af4812ce7a616e72891998ebb3
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-04-04/9-58-57 上午.log

SHA256 05c03f2fbd731c2c975aba7d4756deb459f3ce6ade7fd09f87a70a66089ea830
MD5 a0da3137091c47ffe70dcec630be76d9
SHA1 fe9f7affb35a7bc06f541fa2d82a818eb20eb071
SHA512 4483ba7e0e12bc1f903e5c1b7ed23cf31a44dbf05794b2a87a7fc3be2822456491ee9ce80c5154b8be03adc03ac5462e8d07cdc20044b0cc08c64810372e00fd
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-04-04/9-59-59 上午.log

SHA256 a78abb1c141c1d11127aca5252af1045f7acb4a4a3b8058436cc0988dd8ce55f
MD5 56a510652a2ced6242c7fdf25e13371d
SHA1 04565958561026cf3bcaa34e7894774a578d5e5b
SHA512 e5da5ac9c4c755c0ff4f2dd66d8a95542a3beaf52ca71f363568c8f660c89744543106406e49b3cb46baa796c09f0a990a814eb8233ac6805154768b3b061f87
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-05-06/10-59-40 下午.log

SHA256 b140e4730d0beb0848d7427ad7b36107898060ed0e9271afe36ed54d30d6282e
MD5 92821a281dab018667691dac8a83e3ca
SHA1 5bb2ab0d8a6319e7e6f4606a714c728fe0d60d6b
SHA512 162f5d0e52dfa7a19a6b6dc74f19c48014210a7c805fa1406c8ca9ba52b63b0f72525f87494b6e75bb6e50c131a6bf190b7e31a71e286d67473856cbad6d896a
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-05-06/11-00-48 下午.log

SHA256 b1314f1897691569f52ce730624f4cb9ae5c1b789274dcea48445e096285df7a
MD5 a4fd90f5b87270dbdd6aab9b416cc079
SHA1 c7aa29f5f283ff8ca34657ab74880b34139a9658
SHA512 7eeb5c38d88c0ff4027e450315a889121c2ce1e5ab8d739391c8f165cdd9178b6e90c7232855246b189bd3f838ac06636f3fee383d76b01fb78b1706fdb72200
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-05-06/11-01-55 下午.log

SHA256 35491d350707529915ffd2ead963f61f953cd78787b1cd6cf36dfa54466ca521
MD5 4b40ccf830e6e617f5d26253a092380a
SHA1 3421bf6c02a4cbecfe4c00bc92d1016fa69dda80
SHA512 1a64e5f5c0e6dbc78742f5d637cd9e58060fa89461a80a003530e78a67c125054518350583f374042027b8edbad89a99626e302cc56cae8a2ca6d4696f1a0583
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-05-06/11-03-15 下午.log

SHA256 d83c23bb0b741adb81c7fe3b5a62489a5750afdd86f302a84a02875b838b18e5
MD5 d6cd3f3052eb6c434da84ad57bd9be86
SHA1 17c3de956665bfcb26eb3e37d7a0232eef142cca
SHA512 c724185888bb75e30341f17f2ea35319255c61486add420e551d25ff87a06a7b1a3fede12be1c3b3fdf6739ce7411237fed9a57ae399d4f9d30133e147d501e3
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/AHK/AHK.ahk

SHA256 b032b99c88289c02388bd1db21a3cfc34ac9ab36bc48be5d6570ac6497f70e56
MD5 a908b151cc37c66aeaff20d43ba0cae0
SHA1 468a109f113bf1075fd4f26722bb9bfd0c07883f
SHA512 504e345341a148e80b4397185221b7fa0b74049cdd43a5e62158bf54d6cd392cda1c937e00a95db97d5e5b76f8528d6de175f35a2c50be9477fd7851c7e333cf
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/AHK/Ahk2Exe.exe

IMPHASH caa5e6a2892587c2324418efee31c648
SHA256 e2a00647b5fa56b077d3d07b1c05e3b76b7269e07fc3ea84750eb03ad71024de
MD5 d717d5943bdca2758360e4fa3b008a49
SHA1 3066109dbebd2ddd2ce658ca07e88062bc2ff679
SHA512 3cb028a6ede052842026a278e4cd67682b80cd45945612a07204841e68a09e6fed64de45f984316d6c8de2a44a7d99236339801ae9c4db2f1524f67f659edfeb
SSDEEP 6144:Pbbs8miuWxBn061wjr36UIU+yoTiKVpwCbC/ry7YOTD03AKDGb9V/:TgrTMn061M36RUOTvpwpNO/0dDGH
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

889566

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/AHK/AutoHotkeySC.bin

IMPHASH 46978de0f8944a65af1673d613222a98
SHA256 2514235c34d17fdb4a8448bd088d89f631f5d70f12f5f7d5ee552144a345ed2d
MD5 b86564d0eb29a5faab9e8daacf269df4
SHA1 c5e80905834d48ea1750b2ff4e2fa1b354adb9df
SHA512 6fb1f669290d752d3cc4c96917969e0c958ca1643fff5ccbb8e2a6d5d8b6c011dcc782c5795cde2b0c83b65176e33dfb6cac98ce2a6cfb848888187c5a51955a
SSDEEP 24576:oNR2zaQBt37/CZ0w1PeWnzqhqCC6+PEy:dUsrC6aE
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

589075

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

wsock32

WSACleanup inet_addr gethostbyname gethostname WSAStartup

winmm

mixerSetControlDetails waveOutGetVolume joyGetPosEx mixerGetControlDetailsW mixerOpen mixerGetDevCapsW mixerGetLineControlsW waveOutSetVolume mixerClose mciSendStringW joyGetDevCapsW mixerGetLineInfoW

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

comctl32

ImageList_Create CreateStatusWindowW ImageList_ReplaceIcon InitCommonControlsEx ImageList_GetIconSize ImageList_Destroy ImageList_AddMasked

psapi

GetModuleBaseNameW GetModuleFileNameExW

kernel32

FindNextFileW FindClose FileTimeToLocalFileTime SetEnvironmentVariableW Beep MoveFileW OutputDebugStringW CreateProcessW GetFileAttributesW WideCharToMultiByte MultiByteToWideChar GetExitCodeProcess WriteProcessMemory ReadProcessMemory GetCurrentProcessId OpenProcess TerminateProcess SetPriorityClass SetLastError GetEnvironmentVariableW GetLocalTime GetDateFormatW GetTimeFormatW GetDiskFreeSpaceW SetVolumeLabelW CreateFileW DeviceIoControl GetDriveTypeW GetVolumeInformationW CreateDirectoryW ReadFile WriteFile DeleteFileW SetFileAttributesW LocalFileTimeToFileTime SetFileTime GetFileSizeEx GetSystemTime GetSystemDefaultUILanguage GetComputerNameW GetWindowsDirectoryW GetTempPathW GetFullPathNameW GetShortPathNameW FindFirstFileW FreeLibrary EnterCriticalSection LeaveCriticalSection VirtualProtect QueryDosDeviceW CompareStringW RemoveDirectoryW CopyFileW GetCurrentProcess FormatMessageW GetPrivateProfileStringW GetPrivateProfileSectionW GetPrivateProfileSectionNamesW WritePrivateProfileStringW WritePrivateProfileSectionW SetEndOfFile GetACP GetFileType GetStdHandle SetFilePointerEx SystemTimeToFileTime FileTimeToSystemTime GetFileSize VirtualAllocEx VirtualFreeEx EnumResourceNamesW LoadLibraryExW GlobalSize GetOEMCP InterlockedDecrement InterlockedIncrement GetStartupInfoW HeapSetInformation GetCommandLineW HeapQueryInformation HeapSize HeapFree HeapReAlloc ExitProcess HeapAlloc TlsFree UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate InitializeCriticalSectionAndSpinCount LockResource LoadResource SizeofResource FindResourceW GetSystemTimeAsFileTime GetModuleFileNameW DeleteCriticalSection GetCPInfo GetVersionExW GetModuleHandleW GetProcAddress GetLastError CreateMutexW CloseHandle GetExitCodeThread SetThreadPriority CreateThread lstrcmpiW GetCurrentThreadId GlobalUnlock GlobalFree GlobalAlloc GlobalLock GetCurrentDirectoryW SetErrorMode InitializeCriticalSection SetCurrentDirectoryW Sleep GetTickCount MulDiv IsValidCodePage TlsAlloc TlsGetValue SetHandleCount IsProcessorFeaturePresent GetStringTypeW RaiseException LCMapStringW RtlUnwind GetConsoleCP GetConsoleMode FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter TlsSetValue SetFilePointer FlushFileBuffers WriteConsoleW SetStdHandle GetProcessHeap LoadLibraryW VirtualQuery

user32

GetMenuItemCount GetMenuItemID GetSubMenu GetMenuStringW ExitWindowsEx SetMenu FlashWindow MapWindowPoints RedrawWindow SetParent GetClassInfoExW GetAncestor UpdateWindow GetMessagePos GetClassLongW DefDlgProcW CallWindowProcW CheckRadioButton IntersectRect PtInRect CreateAcceleratorTableW DestroyAcceleratorTable InsertMenuItemW SetMenuDefaultItem RemoveMenu SetMenuItemInfoW IsMenu GetMenuItemInfoW CreateMenu CreatePopupMenu SetMenuInfo AppendMenuW DestroyMenu TrackPopupMenuEx CreateIconIndirect GetDesktopWindow CopyImage CreateIconFromResourceEx EnumClipboardFormats GetWindow BringWindowToTop GetTopWindow GetIconInfo SetWindowTextW IsWindowVisible CheckMenuItem MessageBoxW LoadImageW GetLastInputInfo SetClipboardViewer LoadAcceleratorsW EnableMenuItem CreateWindowExW RegisterClassExW LoadCursorW DestroyIcon DestroyWindow IsCharAlphaW MapVirtualKeyW GetSysColorBrush VkKeyScanExW GetWindowTextW mouse_event WindowFromPoint GetSystemMetrics keybd_event SetKeyboardState GetKeyboardState GetCursorPos GetAsyncKeyState AttachThreadInput SendInput UnregisterHotKey RegisterHotKey PostQuitMessage SendMessageTimeoutW UnhookWindowsHookEx SetWindowsHookExW PostThreadMessageW IsCharUpperW IsCharLowerW IsCharAlphaNumericW ToUnicodeEx GetKeyboardLayout CallNextHookEx CharLowerW ReleaseDC GetDC OpenClipboard GetClipboardData GetClipboardFormatNameW CloseClipboard SetClipboardData EmptyClipboard PostMessageW FindWindowW EndDialog IsWindow DispatchMessageW GetCursor ClientToScreen MessageBeep IsWindowEnabled SetDlgItemTextW GetDlgItem SendDlgItemMessageW DialogBoxParamW SetForegroundWindow DefWindowProcW FillRect ChangeClipboardChain DrawIconEx TranslateMessage ShowWindow CountClipboardFormats SetWindowLongW ScreenToClient IsDialogMessageW SendMessageW GetWindowLongW GetKeyState TranslateAcceleratorW GetSysColor RegisterWindowMessageW IsIconic IsZoomed EnumWindows GetWindowTextLengthW EnableWindow InvalidateRect SetLayeredWindowAttributes SetWindowPos SetWindowRgn SetFocus GetGUIThreadInfo SetActiveWindow EnumChildWindows MoveWindow GetQueueStatus GetWindowRect GetClientRect SystemParametersInfoW AdjustWindowRectEx KillTimer PeekMessageW GetFocus GetClassNameW GetWindowThreadProcessId GetForegroundWindow GetMessageW SetTimer GetParent GetDlgCtrlID CharUpperW IsClipboardFormatAvailable DrawTextW MapVirtualKeyExW SetRect GetMenu

gdi32

GetPixel GetClipBox GetCharABCWidthsW SetBkMode EnumFontFamiliesExW CreateDIBSection GdiFlush ExcludeClipRect SetBkColor SetTextColor FillRgn BitBlt CreateCompatibleBitmap GetSystemPaletteEntries GetDIBits CreateCompatibleDC CreatePolygonRgn CreateRectRgn CreateRoundRectRgn CreateEllipticRgn DeleteDC GetObjectW GetTextMetricsW GetTextFaceW SelectObject GetStockObject CreateDCW CreateSolidBrush CreateFontW GetClipRgn GetDeviceCaps DeleteObject

comdlg32

CommDlgExtendedError GetOpenFileNameW GetSaveFileNameW

advapi32

RegDeleteKeyW RegSetValueExW RegCreateKeyExW RegQueryValueExW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken CloseServiceHandle UnlockServiceDatabase LockServiceDatabase OpenSCManagerW GetUserNameW RegEnumKeyExW RegEnumValueW RegQueryInfoKeyW RegOpenKeyExW RegCloseKey RegConnectRegistryW RegDeleteValueW

shell32

DragQueryPoint SHFileOperationW SHGetPathFromIDListW SHBrowseForFolderW SHGetDesktopFolder SHGetMalloc SHGetFolderPathW ShellExecuteExW Shell_NotifyIconW DragFinish DragQueryFileW ExtractIconW

ole32

OleInitialize OleUninitialize CoCreateInstance CoInitialize CoUninitialize CLSIDFromString CoGetObject StringFromGUID2 CreateStreamOnHGlobal

oleaut32

SafeArrayGetLBound GetActiveObject OleLoadPicture SafeArrayUnaccessData SafeArrayGetElemsize SafeArrayAccessData SafeArrayUnlock SafeArrayPtrOfIndex SafeArrayLock SafeArrayGetDim SafeArrayDestroy SafeArrayGetUBound VariantCopyInd SafeArrayCopy SysAllocString VariantChangeType VariantClear SafeArrayCreate SysFreeString SysStringLen

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/AHK/Unicode 32-bit.bin

IMPHASH 46978de0f8944a65af1673d613222a98
SHA256 2514235c34d17fdb4a8448bd088d89f631f5d70f12f5f7d5ee552144a345ed2d
MD5 b86564d0eb29a5faab9e8daacf269df4
SHA1 c5e80905834d48ea1750b2ff4e2fa1b354adb9df
SHA512 6fb1f669290d752d3cc4c96917969e0c958ca1643fff5ccbb8e2a6d5d8b6c011dcc782c5795cde2b0c83b65176e33dfb6cac98ce2a6cfb848888187c5a51955a
SSDEEP 24576:oNR2zaQBt37/CZ0w1PeWnzqhqCC6+PEy:dUsrC6aE
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

589075

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

wsock32

WSACleanup inet_addr gethostbyname gethostname WSAStartup

winmm

mixerSetControlDetails waveOutGetVolume joyGetPosEx mixerGetControlDetailsW mixerOpen mixerGetDevCapsW mixerGetLineControlsW waveOutSetVolume mixerClose mciSendStringW joyGetDevCapsW mixerGetLineInfoW

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

comctl32

ImageList_Create CreateStatusWindowW ImageList_ReplaceIcon InitCommonControlsEx ImageList_GetIconSize ImageList_Destroy ImageList_AddMasked

psapi

GetModuleBaseNameW GetModuleFileNameExW

kernel32

FindNextFileW FindClose FileTimeToLocalFileTime SetEnvironmentVariableW Beep MoveFileW OutputDebugStringW CreateProcessW GetFileAttributesW WideCharToMultiByte MultiByteToWideChar GetExitCodeProcess WriteProcessMemory ReadProcessMemory GetCurrentProcessId OpenProcess TerminateProcess SetPriorityClass SetLastError GetEnvironmentVariableW GetLocalTime GetDateFormatW GetTimeFormatW GetDiskFreeSpaceW SetVolumeLabelW CreateFileW DeviceIoControl GetDriveTypeW GetVolumeInformationW CreateDirectoryW ReadFile WriteFile DeleteFileW SetFileAttributesW LocalFileTimeToFileTime SetFileTime GetFileSizeEx GetSystemTime GetSystemDefaultUILanguage GetComputerNameW GetWindowsDirectoryW GetTempPathW GetFullPathNameW GetShortPathNameW FindFirstFileW FreeLibrary EnterCriticalSection LeaveCriticalSection VirtualProtect QueryDosDeviceW CompareStringW RemoveDirectoryW CopyFileW GetCurrentProcess FormatMessageW GetPrivateProfileStringW GetPrivateProfileSectionW GetPrivateProfileSectionNamesW WritePrivateProfileStringW WritePrivateProfileSectionW SetEndOfFile GetACP GetFileType GetStdHandle SetFilePointerEx SystemTimeToFileTime FileTimeToSystemTime GetFileSize VirtualAllocEx VirtualFreeEx EnumResourceNamesW LoadLibraryExW GlobalSize GetOEMCP InterlockedDecrement InterlockedIncrement GetStartupInfoW HeapSetInformation GetCommandLineW HeapQueryInformation HeapSize HeapFree HeapReAlloc ExitProcess HeapAlloc TlsFree UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate InitializeCriticalSectionAndSpinCount LockResource LoadResource SizeofResource FindResourceW GetSystemTimeAsFileTime GetModuleFileNameW DeleteCriticalSection GetCPInfo GetVersionExW GetModuleHandleW GetProcAddress GetLastError CreateMutexW CloseHandle GetExitCodeThread SetThreadPriority CreateThread lstrcmpiW GetCurrentThreadId GlobalUnlock GlobalFree GlobalAlloc GlobalLock GetCurrentDirectoryW SetErrorMode InitializeCriticalSection SetCurrentDirectoryW Sleep GetTickCount MulDiv IsValidCodePage TlsAlloc TlsGetValue SetHandleCount IsProcessorFeaturePresent GetStringTypeW RaiseException LCMapStringW RtlUnwind GetConsoleCP GetConsoleMode FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter TlsSetValue SetFilePointer FlushFileBuffers WriteConsoleW SetStdHandle GetProcessHeap LoadLibraryW VirtualQuery

user32

GetMenuItemCount GetMenuItemID GetSubMenu GetMenuStringW ExitWindowsEx SetMenu FlashWindow MapWindowPoints RedrawWindow SetParent GetClassInfoExW GetAncestor UpdateWindow GetMessagePos GetClassLongW DefDlgProcW CallWindowProcW CheckRadioButton IntersectRect PtInRect CreateAcceleratorTableW DestroyAcceleratorTable InsertMenuItemW SetMenuDefaultItem RemoveMenu SetMenuItemInfoW IsMenu GetMenuItemInfoW CreateMenu CreatePopupMenu SetMenuInfo AppendMenuW DestroyMenu TrackPopupMenuEx CreateIconIndirect GetDesktopWindow CopyImage CreateIconFromResourceEx EnumClipboardFormats GetWindow BringWindowToTop GetTopWindow GetIconInfo SetWindowTextW IsWindowVisible CheckMenuItem MessageBoxW LoadImageW GetLastInputInfo SetClipboardViewer LoadAcceleratorsW EnableMenuItem CreateWindowExW RegisterClassExW LoadCursorW DestroyIcon DestroyWindow IsCharAlphaW MapVirtualKeyW GetSysColorBrush VkKeyScanExW GetWindowTextW mouse_event WindowFromPoint GetSystemMetrics keybd_event SetKeyboardState GetKeyboardState GetCursorPos GetAsyncKeyState AttachThreadInput SendInput UnregisterHotKey RegisterHotKey PostQuitMessage SendMessageTimeoutW UnhookWindowsHookEx SetWindowsHookExW PostThreadMessageW IsCharUpperW IsCharLowerW IsCharAlphaNumericW ToUnicodeEx GetKeyboardLayout CallNextHookEx CharLowerW ReleaseDC GetDC OpenClipboard GetClipboardData GetClipboardFormatNameW CloseClipboard SetClipboardData EmptyClipboard PostMessageW FindWindowW EndDialog IsWindow DispatchMessageW GetCursor ClientToScreen MessageBeep IsWindowEnabled SetDlgItemTextW GetDlgItem SendDlgItemMessageW DialogBoxParamW SetForegroundWindow DefWindowProcW FillRect ChangeClipboardChain DrawIconEx TranslateMessage ShowWindow CountClipboardFormats SetWindowLongW ScreenToClient IsDialogMessageW SendMessageW GetWindowLongW GetKeyState TranslateAcceleratorW GetSysColor RegisterWindowMessageW IsIconic IsZoomed EnumWindows GetWindowTextLengthW EnableWindow InvalidateRect SetLayeredWindowAttributes SetWindowPos SetWindowRgn SetFocus GetGUIThreadInfo SetActiveWindow EnumChildWindows MoveWindow GetQueueStatus GetWindowRect GetClientRect SystemParametersInfoW AdjustWindowRectEx KillTimer PeekMessageW GetFocus GetClassNameW GetWindowThreadProcessId GetForegroundWindow GetMessageW SetTimer GetParent GetDlgCtrlID CharUpperW IsClipboardFormatAvailable DrawTextW MapVirtualKeyExW SetRect GetMenu

gdi32

GetPixel GetClipBox GetCharABCWidthsW SetBkMode EnumFontFamiliesExW CreateDIBSection GdiFlush ExcludeClipRect SetBkColor SetTextColor FillRgn BitBlt CreateCompatibleBitmap GetSystemPaletteEntries GetDIBits CreateCompatibleDC CreatePolygonRgn CreateRectRgn CreateRoundRectRgn CreateEllipticRgn DeleteDC GetObjectW GetTextMetricsW GetTextFaceW SelectObject GetStockObject CreateDCW CreateSolidBrush CreateFontW GetClipRgn GetDeviceCaps DeleteObject

comdlg32

CommDlgExtendedError GetOpenFileNameW GetSaveFileNameW

advapi32

RegDeleteKeyW RegSetValueExW RegCreateKeyExW RegQueryValueExW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken CloseServiceHandle UnlockServiceDatabase LockServiceDatabase OpenSCManagerW GetUserNameW RegEnumKeyExW RegEnumValueW RegQueryInfoKeyW RegOpenKeyExW RegCloseKey RegConnectRegistryW RegDeleteValueW

shell32

DragQueryPoint SHFileOperationW SHGetPathFromIDListW SHBrowseForFolderW SHGetDesktopFolder SHGetMalloc SHGetFolderPathW ShellExecuteExW Shell_NotifyIconW DragFinish DragQueryFileW ExtractIconW

ole32

OleInitialize OleUninitialize CoCreateInstance CoInitialize CoUninitialize CLSIDFromString CoGetObject StringFromGUID2 CreateStreamOnHGlobal

oleaut32

SafeArrayGetLBound GetActiveObject OleLoadPicture SafeArrayUnaccessData SafeArrayGetElemsize SafeArrayAccessData SafeArrayUnlock SafeArrayPtrOfIndex SafeArrayLock SafeArrayGetDim SafeArrayDestroy SafeArrayGetUBound VariantCopyInd SafeArrayCopy SysAllocString VariantChangeType VariantClear SafeArrayCreate SysFreeString SysStringLen

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/Admin.res

SHA256 6bddc039731d8fee3f86ca1845507a6707e21954383e73483f1dc6b62854110b
MD5 9e434a1b7cad1906e90769032e707b8f
SHA1 efb451784bdc2c46db67e66c4c5f2986dbbb9ab2
SHA512 ba2d5b230737851c1ff4682215870b5d501bd1fbe66eb112aa6f452d0332de5880db6f189b880aa58e53c7b5c631226cebb33739d62942211f683e444f41898c
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/Aut2Exe/Aut2exe.exe

IMPHASH b11972935cc4c0ec2c384bf1b8e7fab7
SHA256 89afe97dd27c3cadb96481dd38a1352bf6b98fa0206dd2d856728a47dc06f3ba
MD5 d28806a3244af288a2e569e36df136c4
SHA1 373816d4cc8fa8dc5973580aaa8fa9332e089b25
SHA512 59f5bc741ea2aa06ab4e23bf6b722201239c4fce094445f6a98bc5789abb121fe769747c34c105fa6bf38622c31c0a63802c278e5009859003c37c8190081d1c
SSDEEP 24576:PmTiPaj09O2jInFqpL6LqQOn6hyXEkImN5zVv3J4bD71Q51q:+4q2jqcpGen6e9zVvZUDZb
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

ea:e0:b6:69:ef:13:a1:ac:f4:e3:07:b6:8f:67:cd:7c:eb:a0:2b:54

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=AutoIt Consulting Ltd,O=AutoIt Consulting Ltd,L=Birmingham,C=GB

Chains

Sep 18, 2015

Minor OS version

1

Major OS version

5

Entry point

95900

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

CreateStatusWindowW InitCommonControlsEx

kernel32

LockResource GetTempPathW GetTempFileNameW DeleteFileW CopyFileW CreateFileW CloseHandle LoadLibraryA GetProcAddress CreateFileMappingW MapViewOfFile UnmapViewOfFile GetSystemTimeAsFileTime SystemTimeToFileTime GetFileSize GetModuleHandleW GetModuleFileNameW InitializeCriticalSection IsDebuggerPresent lstrcmpiW GetCurrentDirectoryW SetCurrentDirectoryW GetFullPathNameW lstrlenW ReadFile CreateProcessW GetExitCodeProcess Sleep WideCharToMultiByte CompareStringW GetCommandLineW FindResourceW EnumResourceNamesW BeginUpdateResourceW SetFilePointer UpdateResourceW EndUpdateResourceW GetVersionExW IsWow64Process GetCurrentProcess GetSystemInfo DeleteCriticalSection EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount WriteFile DuplicateHandle GetStdHandle CreatePipe CreateThread TerminateThread WaitForSingleObject SetFilePointerEx SetEndOfFile FlushFileBuffers SizeofResource TerminateProcess GetFileAttributesW FindFirstFileW FindClose GetLongPathNameW CreateDirectoryW QueryPerformanceCounter OutputDebugStringW GetFileTime SetStdHandle GetStringTypeW GetCPInfo GetOEMCP GetACP IsValidCodePage HeapSize GetFileType GetConsoleCP GetProcessHeap GetModuleHandleExW ExitProcess GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc SetLastError SetUnhandledExceptionFilter UnhandledExceptionFilter HeapReAlloc ReadConsoleW GetConsoleMode RtlUnwind RaiseException ExitThread HeapFree HeapAlloc IsProcessorFeaturePresent DecodePointer EncodePointer LoadResource FindResourceExW FreeLibrary LoadLibraryExW MultiByteToWideChar GetCurrentThreadId GetCurrentProcessId GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW WriteConsoleW GetLastError

user32

LoadIconW RegisterClassExW MessageBeep DispatchMessageW PostQuitMessage SetCursor DefWindowProcW ChildWindowFromPoint LoadImageW GetDlgItemTextW DialogBoxParamW EnableMenuItem EndDialog GetSystemMenu SetActiveWindow LoadCursorW TranslateMessage IsDialogMessageW TranslateAcceleratorW GetMessageW GetDlgItem SetFocus UpdateWindow SendDlgItemMessageW CheckMenuItem GetMenu SetDlgItemTextW CreateDialogParamW LoadAcceleratorsW MessageBoxA DestroyIcon LoadStringW MessageBoxW CharUpperBuffW PostMessageW ShowWindow EnableWindow SendMessageW CheckMenuRadioItem

gdi32

GetStockObject

comdlg32

GetOpenFileNameW GetSaveFileNameW

advapi32

RegCreateKeyExW RegOpenKeyExW RegCloseKey RegQueryValueExW RegSetValueExW

shell32

DragFinish DragQueryFileW DragQueryPoint SHGetFolderPathW

ole32

CreateStreamOnHGlobal

oleaut32

VariantCopy VariantClear VariantInit

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/Aut2Exe/Aut2exe_x64.exe

IMPHASH 070744bbf7091790d3b13a2aef23e569
SHA256 7261bd93161cfe191e354152d489c3721e41d84a87d6c1af7eaa4dc0c75ab3ff
MD5 cecb773c5b0e15b8d1c02840fd118f38
SHA1 217985ad1cdb4845c69c383695cdeb2645153cfd
SHA512 561e5ddb4aee39cad22fc685c1cd4cce070a88570b521e4dddf392cdab489aa549a6f7957ac222fe1317f985bdcc0b8839e7610b5447418e44a3b3410f9dfe89
SSDEEP 24576:QuvoBBCnx+6TiPaj09O2jInFqpL6LqQOn6hyXEkImN5zVv3J4bD71Q51a:b4uxt4q2jqcpGen6e9zVvZUDZH
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

PE Signature issue

Digest

49:8e:a4:a9:a7:21:e3:2b:a7:b7:52:3a:24:4a:7a:99:ac:e7:c1:d4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=AutoIt Consulting Ltd,O=AutoIt Consulting Ltd,L=Birmingham,C=GB

Chains

Sep 18, 2015

Minor OS version

2

Major OS version

5

Entry point

108976

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

comctl32

CreateStatusWindowW InitCommonControlsEx

kernel32

LockResource GetTempPathW GetTempFileNameW DeleteFileW CopyFileW CreateFileW CloseHandle LoadLibraryA GetProcAddress CreateFileMappingW MapViewOfFile UnmapViewOfFile GetSystemTimeAsFileTime SystemTimeToFileTime GetFileSize GetModuleHandleW GetModuleFileNameW InitializeCriticalSection IsDebuggerPresent lstrcmpiW GetCurrentDirectoryW SetCurrentDirectoryW GetFullPathNameW lstrlenW ReadFile CreateProcessW GetExitCodeProcess Sleep WideCharToMultiByte CompareStringW GetCommandLineW FindResourceW EnumResourceNamesW BeginUpdateResourceW SetFilePointer UpdateResourceW EndUpdateResourceW GetVersionExW IsWow64Process GetCurrentProcess GetSystemInfo DeleteCriticalSection EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount WriteFile DuplicateHandle GetStdHandle CreatePipe CreateThread TerminateThread WaitForSingleObject SetFilePointerEx SetEndOfFile FlushFileBuffers GetLastError SizeofResource TerminateProcess GetFileAttributesW FindFirstFileW FindClose GetLongPathNameW CreateDirectoryW QueryPerformanceCounter OutputDebugStringW GetFileTime SetStdHandle GetStringTypeW GetCPInfo GetOEMCP GetACP IsValidCodePage HeapSize GetFileType GetConsoleCP GetProcessHeap GetModuleHandleExW ExitProcess GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc SetLastError SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlCaptureContext HeapReAlloc ReadConsoleW GetConsoleMode RtlUnwindEx RtlLookupFunctionEntry RaiseException RtlPcToFileHeader ExitThread HeapFree HeapAlloc IsProcessorFeaturePresent DecodePointer EncodePointer LoadResource FindResourceExW FreeLibrary LoadLibraryExW MultiByteToWideChar GetCurrentThreadId GetCurrentProcessId GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW WriteConsoleW

user32

RegisterClassExW PostQuitMessage SetCursor DefWindowProcW ChildWindowFromPoint GetDlgItemTextW MessageBeep DialogBoxParamW EnableMenuItem EndDialog GetSystemMenu SetActiveWindow LoadIconW LoadImageW LoadCursorW DispatchMessageW TranslateMessage IsDialogMessageW TranslateAcceleratorW GetMessageW GetDlgItem SetFocus UpdateWindow SendDlgItemMessageW GetMenu CheckMenuRadioItem SetDlgItemTextW CreateDialogParamW LoadAcceleratorsW MessageBoxA DestroyIcon LoadStringW MessageBoxW CharUpperBuffW PostMessageW ShowWindow EnableWindow SendMessageW CheckMenuItem

gdi32

GetStockObject

comdlg32

GetOpenFileNameW GetSaveFileNameW

advapi32

RegCreateKeyExW RegOpenKeyExW RegCloseKey RegQueryValueExW RegSetValueExW

shell32

DragFinish DragQueryFileW DragQueryPoint SHGetFolderPathW

ole32

CreateStreamOnHGlobal

oleaut32

VariantCopy VariantClear VariantInit

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/Aut2Exe/Autoit.au3

SHA256 3b0a9192ae1945357e3e2a05e20c75663bb1788554f50bd5ee7e8b93c5ad1f66
MD5 76592cdb5646ce753b0a032a219cea41
SHA1 d5d98f2e8ffa8ef963a6f34496b421215b77226f
SHA512 b4efcf8b251e24f3c65573a02c23144edebcdef760d8b672090780455de50485417cc89865441f3ba6279de0d66ccdad4d82ccae93e031af93a349d705feffbb
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/Aut2Exe/Icons/AutoIt_Main_v10_256x256_RGB-A.ico

SHA256 b0c2a21cccb64c4fc11f9bb9dc7f884eed700fe4158c4c36a314258c4f7f6c1a
MD5 83918f1a255213fd4448ef834eb3f1e4
SHA1 296df9ddc2138f0ec0c388c5df2070de8f087c06
SHA512 39c92e85aab120e90497014a7f2d999003e9338b92e7521f4542e409569d84eb026c682d6ecca8f53275162a6c4f550bbefb991ead1736fa1a1e77d9b0947351
SSDEEP 1536:YQMjx3UDso34I7dYgdNifDEarinz7ADk9QPhtzgzhg2TNzNM2IZYp+Iu:+Rc34ISfDEaIz7L9QPhtzgzhthhL+Iu
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/Aut2Exe/Icons/AutoIt_Main_v10_48x48_256.ico

SHA256 badc42da4c0e29af7f6c0c58711d9db7b3d7d4760c18cb521f4113d8cdbc2f3d
MD5 88624b8e01ac8036b6f1971b497dbb7e
SHA1 dac5297aea8464b1034b941f462dfb9e154ea002
SHA512 ea76025aa7c9090496bf37e2d2d57d37a2d5fb3df197f865bf587eda0b6ec2b4aa0e0e148638d59fac22dc6f147408266bf518813996c24e7721238aa364c7ad
SSDEEP 192:E1gGEu0iqLGXHcHReNpKZotgf7MukkN/VX3/Zam0rd:E1tEuLMGXqwzcMmTXUm0R
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/Aut2Exe/Icons/AutoIt_Main_v10_48x48_RGB-A.ico

SHA256 f3e3458fda4b7a6ae1847bcd83f73cbc399ab612ead7cc7bc89801055e267ed6
MD5 464cad850dad4b07257808d584b0d0d1
SHA1 e80d19c22b5da1ea8d0befe4927f15662e8d24c5
SHA512 e15ecd2ed56982944df4c883f858938cdab42e3b7e3114c903b1d3b687fe654e7df76f492900d6750e4f690ecc1681276e1e7b8bbcb5a36efe523f118f69816f
SSDEEP 384:k1tEuLMGXqwzcMmTXUm0UGIruM52CCV251CdhZcoBiiTZZM:k0uLMmbmQmSIr7YKIL6+Y
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/Aut2Exe/Icons/AutoIt_Main_v9_48x48_256.ico

SHA256 c43ad7216d3f7553ae87a03f23d3be0d6f9c5212e5dce3d38b8e8a433a549dca
MD5 a87c314dd8b1fde98fca6e504f5ff8a0
SHA1 f859ecc3dfa3f8cd4a685bda7110e1df28bb1698
SHA512 fa192ac67133665251d7924ec1b6aa165a9407307b1422286deac9dc8d1ced890c351075ae59517d282cc435693bfa54b23f8bec9cbf3ce6c08824fed60c9f4e
SSDEEP 192:8BFhdxMRfZSMapF7Sgx+mt3g4M1yRiSVMqEOk/YK6ImJthR:8BFhnMRfZSMK7Sggm5g4MsEIMhOwJ6Pr
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/Aut2Exe/Icons/AutoIt_Main_v9_48x48_RGB-A.ico

SHA256 1af7f2ed9420f5f524afa5dc2e077f9657d6e13ee153036aa6f71216170c4d6c
MD5 9019034bc36952ef2539648b95635546
SHA1 e5d9b0c79407aba4f7a0e968648cc9d18c89c959
SHA512 3edcc8c35e32e483acc9c303a0c193d5d354a35d8d5787a5b8203611d99d9a2f36ca8f6cf1787393311a74c2abf54e2d7c61307f17f2dadcb17052898305772e
SSDEEP 768:wZM9ZSl70mMshgwLBcjBg0bDVeCMeacZ4:e0Zc0Jhw6aFhv
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/Aut2Exe/Icons/AutoIt_Old1.ico

SHA256 29d40d3cb78d5fa6fafeabddb01296d5feaf8e7864210f5581f1bad50c613b32
MD5 30270204af026b5874476ec41abe3acd
SHA1 14bfa9cd4fcb80e2980ccc1b714784ea7c092b54
SHA512 46677882785f6e745021f194eac9bd77ea7b4cd2068d04599f3d6210101874a7b1d58b4d09d7ee527eb7ac028d941128992e982d7a6d5108e889a7dd3e76604e
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/Aut2Exe/Icons/AutoIt_Old2.ico

SHA256 8b8d0c7d859fd5c0c9e02e5ece8880024e6325af1ca172600d65e6ca9e21c147
MD5 2913855552da6541a6a6a168cabd8eb7
SHA1 0411f5d2326719f41b49b1d6f75eaf4a41291ed6
SHA512 e1c1f1a3fd3f374635d0492809b482b68f84236efbf7514b51a959386ff448aa764b92888e9d7cd7f1d1dcdf296dfbcc9d77be9e47912eb272e64e6db1e76b4c
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/Aut2Exe/Icons/AutoIt_Old3.ico

SHA256 5ff7c00a84867d28db78f861836a6bd0247d34a2f6097de4efa198d7abeb1eac
MD5 0f0e13405457ea08934106df42692329
SHA1 6541abd94671b76c995018567204dd0b2ed2a065
SHA512 2fa98b8d086af58a2d97bce4abb16659a29bfeb7681f1c111316020dde337769b12141a1b3e9930f3db0fd415ab41cdf9fa2dbd4df4e5d6202a78ddf217699a6
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/Aut2Exe/Icons/AutoIt_Old4.ico

SHA256 23672a6b6ac69e0e5f836e52144b44667298a47f08e641d9f227d3bb6afbecc6
MD5 cc38aaf8b57e428abfe0be7309e7735b
SHA1 0e532504897b064a1c08b7411e8c84f5c2fe401d
SHA512 c9bb2be383dc1774befc041015fa26e58dad33b408f65ad95771510cd5025085c7c701f72361f5b688d1698787089e98440cacd03aff9a3831e6ee6cc1e5960b
SSDEEP 96:AH5gAnhuwVv8hant3aygg0+SOehSfvVwxic3L:AH5g4huwJ8hM3aygjkfvVC
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/Aut2Exe/Icons/SETUP01.ICO

SHA256 3f5e1605d50459c0b03313d1e5a0ee867454c328794f2244868c2a6c32cab974
MD5 4e13051b87f131521711f2a19670f3ca
SHA1 2b73f4edd8e67e5592d0186432fe08aa138f216c
SHA512 0ffbf6c9dc8690851ad4b5140dabee6b649fdf40d945e1acce574e9d4721533e77816b366aa5418ff8b4b381eadfbf039b5aaf816f19c7b7689acfed7500716c
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/Aut2Exe/Icons/SETUP02.ICO

SHA256 1aa85f3510d1fc6defbb176e2692db4bf972e27fb5a1f55f128474d12db0700c
MD5 3439b76ec781979d77bcb8cce39b9edd
SHA1 52da91a7a7acebbd597129d9709121addd0423c9
SHA512 896abf5cb9aa1aef7c241a3eb0d2b5cd0efc7c002bb6cb3718da6d42445cf440214d0229045038bccdc06c1339bb8544001f86daf299a4d64a694bfe600c3b34
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/Aut2Exe/Icons/SETUP03.ICO

SHA256 811f6d2c65a11807e016c530eb5280102ca3a60ae4236e35a1c52bcf76dd77f0
MD5 c939328345007935644f57a003931b26
SHA1 d052772a9c2e29ee21dcfb5a013dfe7b2d195df6
SHA512 c88a3d76b28ace176cccfc9d17271fcd3389441cec729fcf53ec4672f951ab3e6f0620de77db8ffe8a51cb4b4c73aaf3f8d66a26cecf70e868b1426da58f3063
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/Aut2Exe/Icons/SETUP04.ICO

SHA256 3be6f9858550929a81498be36fd4c30e7b4d66207512d030a7eb609557415498
MD5 390c6059c6f37d95dd92f5f4957fb3b0
SHA1 64d43b39badde5c3503ad7a25e368457d47a34d3
SHA512 ed08e39bba5e30a542b8716b5cb23c2186c98d1b09fecbe9ba8db8aef9d8c68babb3568208411fa431b6d584e9bed2b4a7fac9dfcaf06fdb4f7687d3796d19ba
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/Aut2Exe/Icons/SETUP05.ICO

SHA256 3f2b68556b2a061580bf9f7b585af74ebe8242041f6b34bc2b6b839f9eaf4cec
MD5 33a3239ef9346d129ceab2e79c8be3fe
SHA1 fe7e9d3f0d081d6d0b20e489085b978198afa372
SHA512 57a604b6b195f6eff89d45f15747041cf98c4a7603ad765a9e150e569e560c432199f80cc3005f0ec166b15c0c47e22482145377338963e9523721a174c78879
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/Aut2Exe/Icons/SETUP06.ICO

SHA256 217766ae48fdfaab3b6c6a59003bd95d92effbe0f8d1b58c2bbe2a2fb85d8610
MD5 a688105d2e3df9769a0b8830a7510d45
SHA1 17f98174f7a47998b210d9decf7c90c2633508d8
SHA512 6f2bea1172568ca2a55a66f50d0d6df31f4425739ccdd137bbb56f7495ce879c1d9eec6cdd756f92c8280e5cb2cc87e943d7f1bfe0c338496d01eb98a90603e9
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/Aut2Exe/Icons/SETUP07.ICO

SHA256 1a92b60da099f44ae3ce5aae5d5be3a714b245ad143e66279a8d0c8ef191b23c
MD5 92396f10abe4461edcafac05e7d9698f
SHA1 8886597b1c49803571edf8c779e850921464c35d
SHA512 5829bef01a3ab4e5c7cfe3a66826bf6f765c05886f488f55bc445219f318a9663d24a1599404c85dce8665df44ad9dcad686729591ad7a8c3ffd78a46b2121e6
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/Aut2Exe/Icons/SETUP08.ICO

SHA256 a42d890a1441a9fca17b70f790ab761a4a0a230d84441cf5649cbf1ed1c9911f
MD5 22781c9a7fbda5ec38501757b7f8b86e
SHA1 7af597b41cecd874e520da71e99929c1b1a3a0b5
SHA512 92d289ce0df5e3f0b311cc871e8c0197e6bf4119f8f9e9ce97337b5668e1928abd4553ad4559635eb1572bc39e7d4958ef62fccd765e02773ef9e42021dc26d3
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/Aut2Exe/Icons/SETUP09.ICO

SHA256 a650a609cce6d1a7ba46cc28d63c30615a398c8e8360c9ed7879abadef366d5d
MD5 0a3959aac836b844f386eca454b113c2
SHA1 b6563dccfb6f64cf6a66f4804388895c34d8bdd5
SHA512 0cac7ac8d90ae5a4eff1fa6bcaf049167c57307404cd97148f7fe71c243f2971a17893622e9c3205ef491d8c718d1e8dc5357511f590e5f91c5630d46123a877
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/Aut2Exe/Icons/SETUP10.ICO

SHA256 81165d5abfd5d9b38ce6b91aeb2a47a5b992871d6a10a0dc3d61a73c03a49382
MD5 3eb2e022fe2a36bf290d9b18203f2b82
SHA1 3673797c7ce6622df602271a98055ad18206f02d
SHA512 5f034869ac75ef8317da1a52da38a37cf4dc5e5e53889cce144ece92d584814de3340058ce4b14e97891724ac36e04af53405605656aced87eac5c2a516ddfd9
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/Aut2Exe/Icons/SETUP11.ICO

SHA256 71d9203e50d7559dba4dda42a7ac14747038a7ec9aef7ded93904bec52df5d44
MD5 9be7e9610793565f6a36a430635e6af6
SHA1 a5cf19b8c40308d53d6a3d4ee2bda62bce2c8f97
SHA512 69cb76290564611f00ad200881f468fd9619867d3ce6c8b1caca21574e4a6fcd69f3e96673113f69eff1ca711db7e47680e35042dab766914d956fde36f0f347
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/Aut2Exe/Icons/SETUP12.ICO

SHA256 3b54a943d71bdf34a40838b967609de499bbe874bdedc0ec223f7e340c1c5b02
MD5 7e3c6521cd6176b1937041c4693ce0e5
SHA1 55b9a725bc51041782c77c4fb279d698d763a49a
SHA512 1b58474a0480f1ce8ec3953c42694d4d0cc7289d1fd7d36204e971825aedabe0afef1d03eb2b7c15cf13b262b00d10e473d5ba1a7b25ebb17c4c6c6b4628de32
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/Aut2Exe/upx.exe

SHA256 0c3dc789d0a46493bd097526b920d913d930d96b1052cb331eec3ac560c89996
MD5 e9eacbb7ab4b3f66019e0a2f13a1dba9
SHA1 ae30894b29e52bf04afc4a54795d438fb910acff
SHA512 925445d20c93c65a282fc59f773551d824bff1f8e2623fd8ea0c587831a9550c400f121defb3d82c8f0401903fa69e3154dc98e29688d02af1d5d01247914a06
SSDEEP 6144:vZCWmlys014OqpXDXz7yIrozs0WuNd3ojusBdgnNW6r4F53ttuGENGFdVCLEYnPQ:hCWV7q9zGImAjJdcH4j3ttzFdVCLNSf5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1680336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/GoRC.exe

IMPHASH bdb954ef3cacc6d0d2d8da424b551443
SHA256 00e5dee46223200a6ec5fe8cb742dfa3dbcab1738233944c7fc8b66fc56e10e1
MD5 d708cdcf904424e5ccfe7583ee1c7567
SHA1 8e47e3f58b42d400d347686f96fadbeca8f08416
SHA512 b6e6fd7266729ce08d7618b1ae5ec231745a188da6c0c8837bfc464c642a36f1603911dd0ccf19f27ca004af2d7c58975f9424472841b165edeab1d0850c311d
SSDEEP 1536:hur3UYiUysl3B0ycb52RH78PMnwdY09RV:grEGqyqsFUXiY7
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10800

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/Resource Hacker.exe

IMPHASH 3cea3b0059dc5ddaa661a158b31ddd9b
SHA256 d98fbfca17f194400d19111e4813340e6666b254b99f833739b661a4d2d0217c
MD5 c6391727ae405fb9812a8ad2a7729402
SHA1 83693dc297392c6a28f7f16d23414c6d62921711
SHA512 7a4e2ff93d853415d433f5e90b36959c78b77590aa1fa00753831eb4d01cb1a972bb9e39eb8dee5b216005e7709eacda51c0c410aacfe37fcdb163603fd36570
SSDEEP 49152:CVQvQX7tXewSaMd3U32VYBZH9p8djP1S2RsT//mQHtbNqS0:CV2QpEBjPpRctHtbNq
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

3103636

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen GetErrorInfo VariantInit SysFreeString SafeArrayPtrOfIndex SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopyInd VariantCopy VariantClear VariantInit

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey RegUnLoadKeyW RegSetValueExW RegSaveKeyW RegRestoreKeyW RegReplaceKeyW RegQueryValueExW RegQueryInfoKeyW RegOpenKeyExW RegLoadKeyW RegFlushKey RegEnumValueW RegEnumKeyExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegConnectRegistryW RegCloseKey

user32

MessageBoxA CharNextW LoadStringW SetClassLongW GetClassLongW SetWindowLongW GetWindowLongW CreateWindowExW WindowFromPoint WaitMessage ValidateRect UpdateWindow UnregisterClassW UnhookWindowsHookEx TranslateMessage TranslateMDISysAccel TrackPopupMenu ToAscii SystemParametersInfoW SubtractRect ShowWindow ShowScrollBar ShowOwnedPopups ShowCaret SetWindowRgn SetWindowsHookExW SetWindowTextW SetWindowPos SetWindowPlacement SetTimer SetScrollRange SetScrollPos SetScrollInfo SetRect SetPropW SetParent SetMenuItemInfoW SetMenu SetKeyboardState SetForegroundWindow SetFocus SetCursorPos SetCursor SetClipboardData SetCaretPos SetCapture SetActiveWindow SendMessageA SendMessageW SendDlgItemMessageW ScrollWindowEx ScrollWindow ScrollDC ScreenToClient RemovePropW RemoveMenu ReleaseDC ReleaseCapture RegisterWindowMessageW RegisterClipboardFormatW RegisterClassW RedrawWindow PtInRect PostQuitMessage PostMessageW PeekMessageA PeekMessageW OpenClipboard OffsetRect NotifyWinEvent MsgWaitForMultipleObjectsEx MsgWaitForMultipleObjects MessageBoxW MessageBeep MapWindowPoints MapVirtualKeyW LockWindowUpdate LoadStringW LoadMenuIndirectW LoadKeyboardLayoutW LoadImageW LoadIconW LoadCursorW LoadBitmapW KillTimer IsZoomed IsWindowVisible IsWindowUnicode IsWindowEnabled IsWindow IsRectEmpty IsIconic IsDialogMessageA IsDialogMessageW IsClipboardFormatAvailable IsChild IsCharAlphaNumericW IsCharAlphaW InvalidateRect IntersectRect InsertMenuItemW InsertMenuW InflateRect HideCaret GetWindowThreadProcessId GetWindowTextW GetWindowRect GetWindowPlacement GetWindowDC GetUpdateRect GetTopWindow GetSystemMetrics GetSystemMenu GetSysColorBrush GetSysColor GetSubMenu GetScrollRange GetScrollPos GetScrollInfo GetScrollBarInfo GetPropW GetParent GetWindow GetMessageTime GetMessagePos GetMessageExtraInfo GetMenuStringW GetMenuState GetMenuItemInfoW GetMenuItemID GetMenuItemCount GetMenuBarInfo GetMenu GetLastActivePopup GetKeyboardState GetKeyboardLayoutNameW GetKeyboardLayoutList GetKeyboardLayout GetKeyState GetKeyNameTextW GetIconInfo GetForegroundWindow GetFocus GetDoubleClickTime GetDlgItem GetDlgCtrlID GetDesktopWindow GetDCEx GetDC GetCursorPos GetCursor GetClipboardFormatNameW GetClipboardData GetClientRect GetClassNameW GetClassInfoExW GetClassInfoW GetCaretPos GetCapture GetAsyncKeyState GetActiveWindow FrameRect FindWindowExW FindWindowW FillRect EqualRect EnumWindows EnumThreadWindows EnumClipboardFormats EnumChildWindows EndPaint EndMenu EndDeferWindowPos EnableWindow EnableScrollBar EnableMenuItem EmptyClipboard DrawTextExW DrawTextW DrawStateW DrawMenuBar DrawIconEx DrawIcon DrawFrameControl DrawFocusRect DrawEdge DispatchMessageA DispatchMessageW DestroyWindow DestroyMenu DestroyIcon DestroyCursor DestroyCaret DeleteMenu DeferWindowPos DefWindowProcW DefMDIChildProcW DefFrameProcW CreatePopupMenu CreateMenu CreateIconFromResourceEx CreateIconFromResource CreateIcon CreateDialogIndirectParamW CreateCaret CreateAcceleratorTableW CountClipboardFormats CopyImage CopyIcon CloseClipboard ClipCursor ClientToScreen ChildWindowFromPoint CheckMenuItem CharUpperBuffW CharUpperW CharNextW CharLowerBuffW CharLowerW CallWindowProcW CallNextHookEx BeginPaint BeginDeferWindowPos AdjustWindowRectEx ActivateKeyboardLayout EnumDisplayMonitors GetMonitorInfoW MonitorFromPoint MonitorFromRect MonitorFromWindow

kernel32

Sleep VirtualFree VirtualAlloc lstrlenW lstrcpynW VirtualQuery QueryPerformanceCounter GetTickCount GetSystemInfo GetVersion CompareStringW IsValidLocale SetThreadLocale GetSystemDefaultUILanguage GetUserDefaultUILanguage GetLocaleInfoW WideCharToMultiByte MultiByteToWideChar GetACP LoadLibraryExW GetStartupInfoW GetProcAddress GetModuleHandleW GetModuleFileNameW GetCommandLineW FreeLibrary GetLastError UnhandledExceptionFilter RtlUnwind RaiseException ExitProcess ExitThread SwitchToThread GetCurrentThreadId CreateThread DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection FindFirstFileW FindClose SetCurrentDirectoryW GetCurrentDirectoryW WriteFile GetStdHandle CloseHandle GetProcAddress RaiseException LoadLibraryA GetLastError TlsSetValue TlsGetValue LocalFree LocalAlloc GetModuleHandleW FreeLibrary lstrlenW lstrcmpW WritePrivateProfileStringW WriteFile WideCharToMultiByte WaitForSingleObject WaitForMultipleObjectsEx VirtualQueryEx VirtualQuery VirtualFree VirtualAlloc UnmapViewOfFile TryEnterCriticalSection SwitchToThread SuspendThread Sleep SizeofResource SetThreadPriority SetThreadLocale SetLastError SetFileTime SetFilePointer SetEvent SetErrorMode SetEndOfFile ResumeThread ResetEvent RemoveDirectoryW ReadFile RaiseException IsDebuggerPresent MultiByteToWideChar MulDiv MoveFileW MapViewOfFile LockResource LocalFree LoadResource LoadLibraryW LeaveCriticalSection IsValidLocale IsValidCodePage IsDBCSLeadByteEx InitializeCriticalSection GlobalUnlock GlobalSize GlobalHandle GlobalLock GlobalFree GlobalFindAtomW GlobalDeleteAtom GlobalAlloc GlobalAddAtomW GetVersionExW GetVersion GetTickCount GetThreadPriority GetThreadLocale GetTempPathW GetTempFileNameW GetSystemInfo GetStdHandle GetProcAddress GetPrivateProfileStringW GetModuleHandleW GetModuleFileNameW GetLocaleInfoW GetLocalTime GetLastError GetFullPathNameW GetFileTime GetFileSize GetFileAttributesW GetExitCodeThread GetDiskFreeSpaceW GetDateFormatW GetCurrentThreadId GetCurrentThread GetCurrentProcessId GetCurrentProcess GetCPInfoExW GetCPInfo GetACP FreeResource InterlockedExchangeAdd InterlockedExchange InterlockedCompareExchange FreeLibrary FormatMessageW FindResourceW FindFirstFileW FindClose EnumSystemLocalesW EnumResourceNamesW EnumCalendarInfoW EnterCriticalSection DeleteFileW DeleteCriticalSection CreateThread CreateMutexW CreateFileMappingW CreateFileW CreateEventW CreateDirectoryW CompareStringA CompareStringW CloseHandle Sleep MulDiv

msimg32

TransparentBlt GradientFill AlphaBlend

gdi32

UnrealizeObject StretchDIBits StretchBlt StartPage StartDocW SetWindowOrgEx SetWindowExtEx SetWinMetaFileBits SetViewportOrgEx SetViewportExtEx SetTextColor SetStretchBltMode SetROP2 SetPixel SetMapMode SetEnhMetaFileBits SetDIBits SetDIBColorTable SetDCPenColor SetBrushOrgEx SetBkMode SetBkColor SetAbortProc SelectPalette SelectObject SelectClipRgn SaveDC RoundRect RestoreDC ResizePalette Rectangle RectVisible RealizePalette Polyline Polygon PolyPolyline PolyBezierTo PolyBezier PlayEnhMetaFile Pie PatBlt OffsetRgn MoveToEx MaskBlt LineTo LPtoDP IntersectClipRect GetWindowOrgEx GetWinMetaFileBits GetViewportOrgEx GetTextMetricsW GetTextExtentPointW GetTextExtentPoint32W GetTextColor GetSystemPaletteEntries GetStockObject GetRgnBox GetPixel GetPaletteEntries GetObjectW GetNearestPaletteIndex GetMapMode GetEnhMetaFilePaletteEntries GetEnhMetaFileHeader GetEnhMetaFileDescriptionW GetEnhMetaFileBits GetDeviceCaps GetDIBits GetDIBColorTable GetCurrentPositionEx GetCurrentObject GetClipBox GetBrushOrgEx GetBkColor GetBitmapBits GdiFlush FrameRgn ExtTextOutW ExtFloodFill ExtCreateRegion ExtCreatePen ExcludeClipRect EnumFontsW EnumFontFamiliesExW EndPage EndDoc Ellipse DeleteObject DeleteEnhMetaFile DeleteDC CreateSolidBrush CreateRoundRectRgn CreateRectRgnIndirect CreateRectRgn CreatePenIndirect CreatePatternBrush CreatePalette CreateICW CreateHalftonePalette CreateFontIndirectW CreateDIBitmap CreateDIBSection CreateDCW CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap CopyEnhMetaFileW CombineRgn Chord BitBlt ArcTo Arc AngleArc AbortDoc TranslateCharsetInfo GetRandomRgn

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

ole32

CreateStreamOnHGlobal ReleaseStgMedium OleFlushClipboard OleGetClipboard OleSetClipboard DoDragDrop RevokeDragDrop RegisterDragDrop OleUninitialize OleInitialize CreateDataAdviseHolder CoTaskMemFree CoTaskMemAlloc StringFromCLSID CoCreateInstance CoUninitialize CoInitialize IsEqualGUID

comctl32

InitializeFlatSB FlatSB_SetScrollProp FlatSB_SetScrollPos FlatSB_SetScrollInfo FlatSB_GetScrollPos FlatSB_GetScrollInfo _TrackMouseEvent ImageList_GetImageInfo ImageList_SetIconSize ImageList_GetIconSize ImageList_Write ImageList_Read ImageList_GetDragImage ImageList_DragShowNolock ImageList_DragMove ImageList_DragLeave ImageList_DragEnter ImageList_EndDrag ImageList_BeginDrag ImageList_Copy ImageList_LoadImageW ImageList_GetIcon ImageList_Remove ImageList_DrawIndirect ImageList_DrawEx ImageList_Replace ImageList_Draw ImageList_SetOverlayImage ImageList_GetBkColor ImageList_SetBkColor ImageList_ReplaceIcon ImageList_Add ImageList_SetImageCount ImageList_GetImageCount ImageList_Destroy ImageList_Create InitCommonControls

msvcrt

memset memcpy

shell32

ShellExecuteW Shell_NotifyIconW DragQueryFileW DragAcceptFiles SHGetDesktopFolder

comdlg32

ChooseFontW ChooseColorW GetSaveFileNameW GetOpenFileNameW

winspool.drv

OpenPrinterW EnumPrintersW DocumentPropertiesW ClosePrinter GetDefaultPrinterW

winmm

timeGetTime sndPlaySoundW mciSendCommandW mciGetErrorStringW

oleacc

LresultFromObject

Name

.text

Size

2.9MB

Virtual Size

2.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

43KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

164KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

76B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

231KB

Virtual Size

230KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

883KB

Virtual Size

883KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/dotNET_Reactor.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 79f190a51af8a463f13ddd5a76947cf7ba2adfb8e231b37c5e0968602217a62b
MD5 a7d69d6ddbe2586d698ebdf7f49c1afa
SHA1 7b87de25c982d0cc42a1dde89790cd34acbcfd2e
SHA512 2d4fb34f83d9794c38ec39f12f78b8d7c5af331aea475eaecf589f95c9e1849196a8d5252a7f9beaa596bb34ddc0c94b76a6c9092dc0fb93ec6b0af9fb66226e
SSDEEP 49152:VXl2PFBegFNFLua2gBxnnim//7rF31inFhyNkLObEECwc0mjZ5tzCo3Eh5pfO+pD:VW5nnim//7uvwCt5tuo32v
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6205246

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/mpress.exe

IMPHASH 51e7ef6b1d43d0d05d7109dee9789560
SHA256 2852680c94a9d68cdab285012d9328a1ceca290db60c9e35155c2bb3e46a41b4
MD5 8b632bfc3fe653a510cba277c2d699d1
SHA1 d6a57aa17e5eb51297def9bac04e574c1e36d9c7
SHA512 b9ea70ed984d3b4a42eceb9f34f222b722c4c1985b79b368d769fe0fd1f19f037ffebe2cf938aa98ed450337836a7469d911848448d99223995f7fb3a9304587
SSDEEP 3072:S0+mlNniJkkKcfqBOb65VgB183gUGQ340HpL:SvmlNn4kkeOAVA1rUGh0Hp
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

225455

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Revenge-RAT v0.3/Revenge-RAT v0.3/FastColoredTextBox.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 777c68c5c47cf91e18583a0fa50b556b1551898a07097f296a0811943a493fa6
MD5 7d315038da4cb77039dc315c64946e22
SHA1 c213bf396157ef97c23a751aebcabfb26f34b7d0
SHA512 794a8f00629f083edf3a7c20fb22fc29a13e1c6822bffcc0696918b7b999a53483d867ea6b7ee08352b4ddfc21c75f03a68a6b45ccab8c4b2ccf582383a6b87e
SSDEEP 6144:0IhBMO76XPxAn90aIqEokJEBNfxfXsrYGeBcHeDsGLPDJ:04cCNNGeMrkD
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

344574

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Projects_CSharp\FastColoredTextBox\FastColoredTextBox\obj\Debug\FastColoredTextBox.pdb

Revenge-RAT v0.3/Revenge-RAT v0.3/GeoIP.dat

SHA256 6615e1e1d8e9ee5ae891dcc43fdd050787f28227369eed50ab3403b171a187f2
MD5 953c073031a08211d72daeec0551a20d
SHA1 de7441086bf49d7e590172ee07ca9ccc3d690298
SHA512 076de07d270878c4846c0d091a76cec925d57399bdf937791232a5363bee7bdc9f14418530593f1a509fe0df3db0454793635b70feb913413829e1bf2c85b8a3
SSDEEP 12288:6pCep6bsCjXR1WPHNnh03JnPbQn4NFMuBn5u8yg6g+r21lxhUai9JA8:JemsFNnWlTQn4NFMcnYRg+qDchJH
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/IconLib.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 087a0c5f789e964a2fbcb781015d3fc9d1757358bc63bb4e0b863b4dffdb6e4f
MD5 45ecaf5e82da876240f9be946923406c
SHA1 0e79bfe8ecc9b0a22430d1c13c423fbf0ac2a61d
SHA512 6fd4a25051414b2d70569a82dff5522606bfc34d3eaeea54d2d924bc9c92e479c7fda178208026308a1bf9c90bee9dbcaf8716d85c2ab7f383b43b0734329bc8
SSDEEP 768:WhZeVOIr9zmWGODfqED8zOJI+IpXgJKCAyEpd+rnwTIQJAqLiA4B0FdIOFMBC3Wd:EP1m3KpOKSEp1TzCaFiPBhlg36eiikN
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

67470

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\Users\N A P O L E O N\Desktop\IconLib\obj\Debug\IconLib.pdb

Revenge-RAT v0.3/Revenge-RAT v0.3/Icons/Android.ico

SHA256 d916ab87f9505dc076e7af56a1115ed023ec1f2a7d1d18f596947c88f7e48f50
MD5 756268a3a1088c6595bd730744ee556d
SHA1 127a475dfb800dd80bebda67fcfb988343756ef8
SHA512 7060156ba8cfb64aeece8feaf94f357df905055637d4885840673e6072a29b0e493972540aa872ad5de1a41d05929cc2628761e1b5f2da48371bd0b9fd2c2208
SSDEEP 1536:o122ovjiAAAAAAARtvNEEEZTEEEEEEEEE1m6XXXXXXXXXXXXXXXXXXXXXXXXXXX2:g22wjiAAAAAAARtvNEEEZTEEEEEEEEEE
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Icons/App.ico

SHA256 5358a9fa31441391e218f3644488d7da23a9258fc6e6bf3ce5e28990cba31ec1
MD5 bb4f42af3a9265c3c9b000bf830fe879
SHA1 36f84347a618a9d92655095540296bc9b2e157a1
SHA512 d8fd1a1ed2e8f598411bea27f3b4ea24c5ae1badff8cb4fc94d5cc5ab5a54ea0d087617b5e15ec0967cef70f09bdb4219ce8afa5b6b6306be27bc6b45d2ab7db
SSDEEP 384:Bm99P9A7IcCWXLM/AbH7yipq4K9VJy4yCrm:I991ANwAqSq40Y4lrm
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Icons/Apple.ico

SHA256 330d982b1681869c0489074afc49a408a73b331c1333a3575b9c1182db157e14
MD5 c93da6d84eee085d3d6cffe2f4a4d841
SHA1 bc38a9b3fd72bca0e01e2e637cc4ec19be3ee6b0
SHA512 08fbe75cf125d33fd9b79820f37a2391e4a90e007533830db50edc98ea60b921a2ddc494c38dcc70c165c9d9ec6667311f923b4c375a4772bd738df3bc8e8fba
SSDEEP 96:sue5h8WDAXNVtNzyD95D1ap8FHiMpCWglc/lgm8kzBQDt0z7re1lMnC1mlkhLQRY:sX56WeHODrhiM8s/lga+tK7reQn8ml2
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Icons/Application.ico

SHA256 7283a30a9d116fdee97afc8a7c9fdaaf6549bb19363e14f6d1f979a086487101
MD5 f9930b8c1ff63511b83841567d9fe5c1
SHA1 09dc66531b204097c0392e67c0c99e0b19162c93
SHA512 d447204374ec1563df5e2f311db44a897dc2e9efd9b433fcb08c18d427adbac8ce29bcf47fb6ce65573835bca0e89708616a36cd5429c153dbaa91aed231a544
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Icons/Archive.ico

SHA256 644a9bf61577d5e2f232c1fe726e229f2dcd66a67001c19433de5592545f7cfb
MD5 2571c55b52fb72ae1f76ea4ae2f0b5c1
SHA1 97f5602577e295c3b3e6d5bf55617775845ec7fd
SHA512 bf7759bb7d6982a08858d3f972b27a00be120d0158f37d675d2cf02f6f88a9a6c4be835e0bbb1478d80ec6e7fdeba52e1f34477f0a57e0e5b2c1c1a34d5b8298
SSDEEP 1536:3WGweW/+/XXFTy2gPZMp0wxHSPJ3BXlUgtWa3NMA8:LWQVlgBM1HSPH1Ya998
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Icons/Excavator.ico

SHA256 83f76127a50dbcef9436a5a9650f755d4d3b9bfd0ab8f8eadc263530085ce818
MD5 af06cb5d8673a19a730db4f08eff7db1
SHA1 8f21f060cfb8ff5ea2953c548ab8ca569ac1dd50
SHA512 6c56b97546e0fc7bc689120845be9b1d6b4dd52e984d3863fd5b22dd02ab83e136441ba642705b9fa5bdaa867dffd39104b48f080b9e7592c1b07bfd135ba23e
SSDEEP 1536:daTPX9Ld/XVpNBggkcgonQg6+UjmXhzWv9FPHCV10u:ATPXld/tCALXX1acf
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Icons/FB Messenger.ico

SHA256 5a91a1f13c3fd19a9c67a9073f7a49dab95bfa6d0aa2544b188e3f271f5b345d
MD5 64d94d65cb7a0ba287ccd94ea569cfe1
SHA1 a27ecca85cc34fa99cc3f8f80e0b0efae2b93e44
SHA512 e3ea32660d547d5adb1aa362b65cc61f6a8ba2708bf00375949532e72c56b7834d842deed725acf612daa97d833f592d26330911e1888b4bd12894774e7b1af0
SSDEEP 192:GkJNAdK6UrRUg8AzjSWUTbYNA1ocy1BKK6Tx6v+2RFIeehFRGDlufCOgZ2db:7AQIOO+NS+KKj+MFIDFRGD0p9
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Icons/Facebook.ico

SHA256 ecf396330a941232247b616679e20fc36a3086caa1924b5e65580a27f2ce7e3d
MD5 596774917b4d339ce1dbbd1e1d181e93
SHA1 b24829a6ce2afee111c32910532858cc1b1516ad
SHA512 79abeb7886b52d060ceac8584610e1c0669712acb8da0074920aee550aae3172f9580dca50e0cded3f5469072f515bca0c6eedfdc78d77c33e910a67b403492f
SSDEEP 3072:tB/K2WoM4/HrRKaYc0WMLe3iUkb+ptGJiNI8s+lyuXC5kmJzNdTm32OHFZ3r:P
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Icons/Filezilla.ico

SHA256 cc24a2b2ddc4094d42625d0b7067570c41499c5da147132c243c7e995a8bf965
MD5 253106c7eb9e8903609788a2ce4e4797
SHA1 c95b3bca2f7385441a510e6b9d70bb4ac4340ca6
SHA512 2f768ee2e3693b703f2deb4d5a53ca2a2b29e671a67c6ad1eca70a7869b967be77a5cb97b9e06d6c41ff619b95d60b05223c068c90628a7494cd108b803323cc
SSDEEP 1536:GrCKXVjPtTVjgSsBAMFql4wNt0lg5CB+xP+9y:G+yVjPRn7MFql4wND5
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Icons/Firefox.ico

SHA256 215e0b78ad560d67c719fbad14b41305352ba2b3f6e515525160b158885e32a6
MD5 6972023c6f005ca2fe6dec07b028d9a2
SHA1 c0ff449f6ac4ad81c87ed66b0fdb81a304568d36
SHA512 764e6926d5f8bfecda5bf9d8e6878b70ccac92529ad41b70570e7494d225959572ec29cab5232c45f990c0aafa5dc1faf6d0011f90a77376ab71d2d8ea3f0680
SSDEEP 1536:MVOPAFWWRtYdM5d4dIQFZlW6SRV3+eqZTApT8vf:yoAQWz5GdIQFZ8HRVFqc4vf
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Icons/Folder.ico

SHA256 7eac81a811f2bfd74a103c2207eb9c3198e90975919f88c8cf6b503e5ff3e587
MD5 962baec155c4acd3db65e4aeb61fc8a8
SHA1 22661d78872db3886d8fa026d763857fb19c1f95
SHA512 b0703af65e692a7f5a8caaf75a78496d733dccdce42e9ca1610a7da1241ca0fdc1d26a2d419ebf6ab566d373d0b217b9374a339a750c99909781578175535013
SSDEEP 3072:Dgl7XX6rLrPrkrp/prIPLCrLLLLLLLLLLLLLLLLLLLLLLLLLCL5LyLaLWLtLaHL+:Ml7XX6rLrPrkrp/prIPLCrLLLLLLLLLl
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Icons/Google Chrome.ico

SHA256 d6b62311ceb8c0cf212ec28fa38b6d49233eeb61924c54f265f5dcfce91bb49c
MD5 5a89bf05438d7bcfed60b0944df2e69d
SHA1 8c79886f370a07395d2e29391ec72e4d280b2910
SHA512 41b82078f4137f4b5529dc2234efbf507fca15fc4dd3fb00db0da85a0786791663790687df2f285db0947fa9293e1044c35b474e7bc83354c5d2a08d5ec409f6
SSDEEP 384:RSDMK25fUgitMbrPcPzrDnoqJi1CRz+F3Zqnhi13yfVvFrWqIHRNdEv34E59pFpp:UYF9zbgPzrr5QIzW+hIyfdJWqIDdEgi7
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Icons/Internet explorer.ico

SHA256 742eeb32b257a96e51970db86769ae43c82fa5640459f2e52ae1ff7e7c92625c
MD5 777ab57d659fe91bc80ccbea2c31db61
SHA1 a7c8ff738a381257b80f3505d5f150278d8cd71e
SHA512 91ac9eee610d4649a1f6766537a2494fb717d8496b937f9c5676b1f4b825dba3769b4841335c1439793eabe74b879653a658ba9e048c3458e4b15f1c3601cc5f
SSDEEP 384:ky2hXDMwKtOynRRiZYI8W36OfiUX0jEI1cs2W3Yn9ZDjM9IbHrUUia4BfyPhC25K:kywXgL0XGJ6Ntj7EZImfN2D0uQomJzcm
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Icons/Microsoft.ico

SHA256 d10f94716288e2a22e4dd61e6167f953dc096783da87ec2352b396229a54570b
MD5 d3d3531d4bf5be053c2e5a970003f34f
SHA1 8c589076c17c2fbe09e34e67a8af3adee93cc8f4
SHA512 50c4b0850fc575fe974cbcec4d394fac351a6a1091ecd1bcc4f18e7220c08b42e6c191e6376f5cd518e86f599f691db795df0ea772d0f133191f1689af37d933
SSDEEP 192:GkVFkli49He6bZjwvU7I3sDgfEr4nczQP0boXm7TsGrNxzcVRKeHHHHHHHHHk3Uf:rkLsGrHpUKvqqqqqqqRFpd
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Icons/Moon.ico

SHA256 8e313d07004880617dd4fa88d367b9abec6d1b679adf45a4ce587990e8da64be
MD5 2c0c7e1ddfe64fa7aec23814f6300de6
SHA1 c893a9c6973d2136faffac8514bd8ff018bd5f64
SHA512 199e62590ff4a0c12d204a37b0b9d27495d9d2781b745e1519a52bde450e89a94d6e28b64f30cc137efa448040538b5c05540852782a3d53090fd723b2986b54
SSDEEP 1536:wk9whdS4MOH6Fae8qERNtfuQX3i3nMyIe/e79:j14MPce8bV/ihIe/e79
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Icons/Notepad.ico

SHA256 c89e33cd8fdcc3e37ea8bb4c5494e8f328509e14eeee0ba1670cfbe944b48c92
MD5 1236d6cba14f915d5eec4e2e7127ab9d
SHA1 759e5bb7ee303efc5ebc26d310008084a252215a
SHA512 08ee11a217e8779c451e0c7badb9259160f788a46aefa8889841b36471f6615da1490789a2d820de1acbff3d16a2e82d782187ae01e5370912e1b2ca7afd3eb7
SSDEEP 1536:25P/ZExUHHHHHHHHHIHHHHHHczJXNATd9P4RL5Fj:AKUHHHHHHHHHIHHHHHHczJXNATd9POj
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Icons/Onedrive.ico

SHA256 a3c9e33dafb4c829a57a81ba8a6d94c2da9b343b6f9d6c933a4b5b88bbd96495
MD5 257440f1449c4505669d278bf431405c
SHA1 5235870185889ffa48234f1f4af14647634c19ef
SHA512 d99bf41a9017dcef261fc9886887fdeb3d3b6db806d92d8f76c783764caa7f94738b7258750a5fb26cb6069f471d1acfb55dc79db5855a5619e9d864e74761a7
SSDEEP 384:dEvdHGjnXrBiB70IOiPqBdxFeAYP60QJ1GV7EwEXCEfh/z7Pmww0fpb:603Bcx48Cg3EyyhnPbb
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Icons/Opera.ico

SHA256 035b9616552475773bc4f06e93b1355e855a036e83e3a93df5db08fdc39221fb
MD5 721a9072efd386db8448a792d1e6490c
SHA1 ba93aafe4073c3fc3b86e71ba6a2a3fb787137f3
SHA512 9a0b4c6a8298d95b1b777b5ff82c37c245c2ab9c8d47e3a65910969d569f1b245cf0968a9374d1d1e979b7a94c8403a96c6ba08ca5782d3b853db771d99d1c30
SSDEEP 768:YizBa/0upqEmqBLt8QQQQQQQQQQaXpkVkDbD0Opm8CT:Yi8/0/qptPXpk88OpxCT
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Icons/RDP.ico

SHA256 8526f2c8d8fedd7182f7d75389f9c1e7d5bd0f246acfa90eac50512e0ad92e00
MD5 260816e9c7b5be5abeacb88f601a0e5a
SHA1 d5371a7504ddecc528f8134e808163c9c12eddd9
SHA512 c1eaa1015f0ec3071de1968fa7b632a2924d64337fa5125db6f1f17a15dcb6cecad54f4a13ddce3f38e14c025f7d15a75a7051366aed12b3ae970f883f2c374b
SSDEEP 1536:/iqhAru6xm59BW5pc4zJWOiWi0pSFHnRH4hQ2AIDNx:PhAaz5T+9FWORi08HNeQ2AuNx
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Icons/Rar.ico

SHA256 f829514b3037facea6240bbf51de4f99c44e11b10d1b0a40b4109b5b4e38a0a3
MD5 63d73705c298a69c84b237d83e547ed4
SHA1 eb8add338da89641105bacba5813b994e7d248c3
SHA512 ebb1e013ecbe958dcf04123454ec43e790de25d92d645426875137d5b8460c78d100f68dde1cf30c695d912557b8e40f8b8aa2f46b29c24906cfa64304be519f
SSDEEP 768:DEL2zaNxxxxxxxxxxxxxx4v5555555555555555555555555555555555555555X:Ds2ztgZkj
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Icons/Remote Connexion.ico

SHA256 890cb8034fb7128246522c5be482152c519eb8bb379ae111d12e1953cd4c8047
MD5 e22e842f991310d714a972103b4649ce
SHA1 8eba5b443b632717511e89fb5db56ff4e73dddae
SHA512 145bdb1ef36baaa06d49d36e8e765f8aacb7fe53f2587632a9ac3858227bdb9125e30461493ccf2d546a0fcb2cfea9b898d6f6e9f67fbc5022dea324609272e9
SSDEEP 1536:SzgaRYdJFVGf5WckZj1552AfJmSwpn/H/jXeFub4Qf6h96e3:kmJFsf5WcYjBdJmSwpTes8nP3
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Icons/Skype.ico

SHA256 984fd5e0070ca81e5802f92b5cebeadf9011f9de9f8163fb50fc1271577a8706
MD5 324330374cde16621257e5dc1a04df47
SHA1 9c6227be542812dc8e6753ad582c2116c55e0613
SHA512 bc6adda998a70c3446a2e7ce6ada2bb0e776e10f5fc1a8ddec546bc30769c38c512ec5c0c84166c937ed831d6c072c0349219b22221721cf5edf75bd3164f82c
SSDEEP 768:0s88LlzJCFaVMIUeOoivdE526pE8iq9770B5+UbBa3IUz0/OmjWFytjv3s14E1ZE:0mKKiNly6W17+
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Icons/TOR.ico

SHA256 14b4919b0ec4056b5cc4c94ae87642cf2462aaa46e115a0af8921d7b02313b0a
MD5 dcc503537e740825ab65c819e4a071aa
SHA1 93abe9519b647738b7bfa4cfb7227366f8a2a781
SHA512 6b1cba9950cfd5b5279100bc16c39b3dd32e78a01285e892ed9ae4492a05e1b664c92e519c08ad1c206bb98a63d463df2b71a70c23ba2dab7e6674d08fb2a4d2
SSDEEP 768:8GXY3W1TELmih6jAGvDEG5rT7X/jxKwk2:82Y3WK6iMcGgqHPHk2
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Icons/Team Viewer.ico

SHA256 12543f4e3f049b5de1e2e9581f005b73421705721db71747fe47c872ffd70b61
MD5 6745758f7a0de3890657406ee25a550a
SHA1 3c073e990e8687669b16c895b9796b9e5ce51fd0
SHA512 1aaa6c3c3f00b2cd2ea24f9b53581805eceec8aa4589af74c17bc921e816afb445d7b0ceaa9e74878d8f01a0e5ded4a03ad5faeae43ccf04a7eda9dc934ddea7
SSDEEP 192:CpBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB87jGwyUyUhzfNffLYg4ffztep:CpBBBBBBBBBBBBBBBBBBBBBBBBBBBBB0
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Icons/Torrent.ico

SHA256 33e662e70eb1507dc151d7803a8e8bd3ed36adfb3dd2f1c4286e48c52fefba35
MD5 215f533df06c2eeb3d38149d6c5f2704
SHA1 36d871f42446f1c79e5203cca9e5f662aba973e2
SHA512 d8361dcef3ba8f4ad0079df0ca06225643346b82e9f0f3a392fe7d0f77b02129c69255713d734ff5ca639d93c217bd03b1a7128ff817596c8f7ff1421b1d9eeb
SSDEEP 1536:s/wv3dNbLaOZvFFUe57K1YqTr/N1DiB4JU2OR5FAbbjuchIAq:3c+CzTDThOZATVq
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Icons/Ubuntu.ico

SHA256 d9fa648f0d5c794ad2e9233f6885c483dd85f14ea8839fe8109eaa897f25fee0
MD5 163a275a837ee2dddc581cff77fa000a
SHA1 6f78744d0ff12a19d347a0a4ce28b4030d96363c
SHA512 ef8b3f29657ff0ffffff7aed4246ee130d85893f43aa07f54c0135eec14a1200d1e226ed0d574746aa4116c5eb006dd3eb3dcc4e515e556290023fa5386329e8
SSDEEP 1536:ZVq394u4ze9TJMQw67iWEdMXSlkCWxwf2rJM+3WIEAWvhGP8066h1hDoY:HqhSJTibjMJGEA1uY
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Icons/Vmware.ico

SHA256 8b11411fe5dee287c525a64b3eb799fbae798076a3880ea0fb65a41a0bab50d9
MD5 46bc8bbaa05622c769fc1ffc8eeed5ce
SHA1 a7cfaee2b7ddb7790a47e94aca59b1d63b5b5825
SHA512 b0d56c9a064be11226e3f15d5e2525faa125af935dc7cdbda294c7afaeb091bd2950da71dfddd3b6febf4f0a8027e3af064b854dad8a83131198abe258c4693a
SSDEEP 1536:HRb72XpFGQu3H/Ckz6ebM0+XkvRMAfeQhG:HVCpFGlresMkvRvfex
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Icons/Whatsapp.ico

SHA256 f0a41918121fe9c33f5e3b14763e2888132e7bf100d6067919366edaaeb5ae8d
MD5 6bb939004d11184efac7aa975aea2031
SHA1 46173901695cbd9ce205e383d0525d8916d0653f
SHA512 e8d11a0e7ff648dcbd7e4c76bc8dc4800ccd441cc695b1032bc9e9df316f2cfa6901ceedeea2fc5d7bf676a8eb21ebbc12cc04ee39e564011802a32fd4044bc6
SSDEEP 768:qN0FB8jAGkwf9n5BKDfcdiL2AjrRww86k/kfXD1I4HkgCWHis9FJZZvQxlV:eEv/DWBk+lV
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Icons/Windows.ico

SHA256 bff88a1f98572ef232a82c2d4d19e73a1e6feecdb5fb740669b201f24ba03fdd
MD5 948ccf71241fe402427a061d458987a5
SHA1 03cdb1f5fb7763b0e4194e01a44daa0a5518eb13
SHA512 4668495211ad2b2c1b1d565eb2fe80e4f08695670ceb2d6f67942ee53e9cb360bc673b2a369e112861a1e060b877922797ad31d551bcf8a4b5392e825e9146f5
SSDEEP 768:0kMlsB3/wIxnPQ7xqe17TQiJxl84MkuNnuBfBxOEQ:0khPdP+qe1vQiJRs
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Icons/Word.ico

SHA256 2a67fe8db2a32b1d737dd151250683216c9182523378ec2827b25391bfeb81c5
MD5 49affa5a84cde53ed4596817382e4c4b
SHA1 f5ebcde647da8ebbd73a4a584c573c6b63026510
SHA512 f75c9fb34824e3d13f75034cfa0f7cda238e540eb64674249a10e539d80832e0cd3fcf8f95c4aaa1f9c056b2e2566e9d1203eda98cb0ae776b284d121c841fe2
SSDEEP 192:ktgogHb93Mko0M4Xq411111111111111nsf4OZYx9v9EGFA:kFMb3NMP411111111111111s9Yx5bi
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Plugin Compiler.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 2f4fd04bbf02ef75845bfb287e5abc4fb7ae9a81776142b573eadadbf28fbe81
MD5 fb315d1ae339c9506033026e78500199
SHA1 97dc5017a8a796750567fcd7b5bfb4be2233a5ae
SHA512 895fc9f3c10bcab8c30fd7773820130b7d8d7e2145226052fedbb210b564db39e9078666762836235a8c6c40c49a3bb2b41f49f7753c97c2f09370a0327e154c
SSDEEP 3072:L+xuB9c7YdbMKsPcomyThhKq1+oXL8/xeAdLdZPn9Cc:Sxu7c7YdbMKsPcomyThwq1+w1Yn/9
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86 polyglot

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

539150

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\N A P O L E O N\My Projects\Revenge-RAT\Revenge-RAT v.0.3\Revenge-RAT v.0.3\Plugin Compiler\Plugin Compiler\obj\Debug\Plugin Compiler.pdb

Revenge-RAT v0.3/Revenge-RAT v0.3/Plugin/CH.dll

SHA256 10e91c9ea564d040981b0506a2ed7dd406df88c89740dd7616c2f88b5337e29c
MD5 74714e0a1319b0eb3fc927df4c2ceaf5
SHA1 4c5f75dce1fc61765875cab59b7229667223f633
SHA512 b08e1b8b3fef63d32a938254e3486f531a3905750ef0b17f74000b15c9653a73eb038a09fb0bf55f7998a5632d28fd5691139142f4839be8c2c3f931c4fbc92e
SSDEEP 768:mW6Mo9FAGXEJMfU9TFdlRSq/fkunHCKc62lsSNGw/0OMSrRpHgNmFVzuJiMNgi:JiFPXEuUzkq/0K0JGkf3Rps05Ti
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

CH.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 59136d6e292fe002ebf47a44bacc9b8ad76f87ce19cf8bd51e27a30fd1df91d8
MD5 3cf686a89451820fd1aaa34e3cd15c1d
SHA1 36f04e9d155c661b16cb3a8c4eb8e1950a555848
SHA512 1ad21b80205ffab58f30f26bda51b80917a392b65bcf49bd6e9a4dbe9f04034e13673cb5f44b65f646294b98a7e14c044adeb687558098650f1920af10588d65
SSDEEP 1536:JiJgZqtGU0unGpqJi+A9vcKQdC3ZAg8q:Jek/pqJir9vVnr8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

93802

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_DLL

PDB paths

Revenge-RAT v0.3/Revenge-RAT v0.3/Plugin/FM.dll

SHA256 2ef27c1ae0ce87a82fe18f937a76db8be67735c6202553d2870ee56bc6739268
MD5 1b16248031ba043363a528c2f82c2dc1
SHA1 ee4e968ee95d6ec2057055d01e7239be4dc7c377
SHA512 5ad3735e667c44cf88327d7e2d006ab75efca2610b71903d857cc8456f04571e05ddde46ccc74f947b8ec01458cf08b59aa133953e3de33d0bfc7168c62fdf02
SSDEEP 384:S41ud32YXoDDxwWc9zKAL1aJ2jhHJK8hWfSmWc+BEIc7shEgs4r/sxc0w/ML90E:BI32goDuWc9lDd88hxhoX7shls4wOz/Y
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

FM.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 4b318960abb9e0b1b78a21029bd328e91e366953d295257c27799d4bc9912e58
MD5 ab93e73af3e9a13bc45d5c9f2f00103e
SHA1 01daeb46e4be37bca355010139759f29b45685e6
SHA512 3a434032cc970529ee2d1146abcf22b6dee270a7f4440c2f2e1ad2d23a4bb86163a37fdebfa7b64fca0501acf96db2c7f13d360c33ae1aaee8dc13550c7e53da
SSDEEP 768:hlOfJl4yHE2QY+uBYTlR7wEOO6E69Mcp344hQd:rqk2QY+dTBOOI9Bp2
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

51470

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\N A P O L E O N\My Projects\Revenge-RAT\Revenge-RAT v.0.3\Revenge-RAT v.0.3\Plugins\FM\FM\obj\Debug\FM.pdb

Revenge-RAT v0.3/Revenge-RAT v0.3/Plugin/KE.dll

SHA256 fe791f5d02f03a13be299ca5935c67f06cde865be796b62f672b047448f74a4c
MD5 ffbda8e0bc1d723fe87201bebb47bded
SHA1 00297503ced4e2b6dc4b2b41ac0541456cc4a162
SHA512 5df4be564a31c201cf59b967dc25ec64028661d4a38ab00ac77758aafbc47407f9541382d221a4034d0fa5a65abf043249492d5ae3cc0932a91b8cf4be03cdf9
SSDEEP 192:K2xz+Vs3bqIcJAXHyTcR6xw6kvWytnsnM6AKQ2JY1ohv:ocKAXHASykv5t+WQY1y
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

KE.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e064540bf40bd00d0a6b5690cbc8e4f08b04f8131f93daa8f256ef0719764e5a
MD5 cd35c1b8ea209655b6cab2b15cd92009
SHA1 1f06237504739d5de454b730048c4b9ed700b68b
SHA512 7cdb5458d5fe1b4d8367093e43641a3571343a8bbb7c0db525cfb37203c25829cb87532298d0d111b2f4e99a6bf60618f8f2a16299bdc597421fa28bb71f3480
SSDEEP 192:AP1reP5lRvaQg/JW5yR538AIKMetpd/g6jQJF9pmK768OhEOULs0slaAH5:AtS1orIKNhWr9pReNus/aA
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

19502

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\N A P O L E O N\My Projects\Revenge-RAT\Revenge-RAT v.0.3\Revenge-RAT v.0.3\Plugins\KE\KE\obj\Debug\KE.pdb

Revenge-RAT v0.3/Revenge-RAT v0.3/Plugin/MC.dll

SHA256 81c1a5afe6e0bd9c5047842f28865dc843554e5dfc88e35807d9fb79076076f7
MD5 6e72b0d89bfe75809d528350f97a0a61
SHA1 b9de36dfcd5e53aed2b01b5e28b6084095d40c82
SHA512 f32244ed6fdeab55de60d64526399655f2281db6bc71ffe155c0fe1bde23289bc08fa7ec1796e1df34e7a3a3309cc56658b9b24275de9ec29bb9f62b63814688
SSDEEP 768:3J32XkuZ3lTX4wbDnmIjav9R5ErhWq48+Xy7rbs:532XHZP/nmcav9R5Erhr4Y7rbs
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

MC.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 2dd148118f036a170e651b2f37ebec4d1ca0a8045d23b140e7c19f48d62c2d33
MD5 6be03e38cd7f7d427cbb2e4388fea5dc
SHA1 9041e71a36568cb59d4a56ecdd6f6683945a191e
SHA512 2b3379b41b67dbd9351ee9eee325f1f43de7912cc8e0f4d715f2606d756deefe150256529efe5abfb078be1a6057f915103181a7049808508a004e8b3c3f74ea
SSDEEP 1536:/z3FRYGoemQTxqPb2waAnWYeICxZj8uW:/z3FRpTxqiwaAWYep8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

60166

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_DLL

PDB paths

Revenge-RAT v0.3/Revenge-RAT v0.3/Plugin/PA.dll

SHA256 3b053d5a53609e10e688b0b83c330150977c140dd56817fe5acd9ee439f57839
MD5 659e90c71374dc81a30e65488e8ebdd6
SHA1 e2170df6583daf11dbd71dacb46702ae48033381
SHA512 d64c435c9b626f77c61ce117a5d78bc67988365bfad8f77d49ca52dc2164a351dca4d6f1c433b1432ef835a75355906e8df33794c99f1b5149e493f8191af51f
SSDEEP 192:K2xZ9GIJsC6AIBVCKY68u35t1XZ5rHqm+SBJir:RR/K+u35tn5rxor
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

PA.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 900a28a13cb1cae326273de9c2180cd1462a5680d9d9f2d34e3b7f677afcf01d
MD5 1a4482b724ceaca8019f0e6659005fa6
SHA1 3816abd67d1b6fbaf9e2e2506d31fc5ea035da00
SHA512 9fe5af3c14ec7f2fbddb772b4028af8fc501c6ad161741efc0384c458b6cc89f8bcf223b0c8a1bd157a722fb8af309dbabc7e8792adc84bff88433c1f3c6725f
SSDEEP 192:smiKEGfY6RvUTTsPpPJOY1f4Qt/Ra1EEZ9JSM0Y2Wl:ji3FTsRhOW9Ra1EU9orYn
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

19150

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\N A P O L E O N\My Projects\Revenge-RAT\Revenge-RAT v.0.3\Revenge-RAT v.0.3\Plugins\PA\PA\obj\Debug\PA.pdb

Revenge-RAT v0.3/Revenge-RAT v0.3/Plugin/PW.dll

SHA256 36969bd0c84263c1d0117c8d232ff8d3853d72f5ce5a067cf14ef4181884b556
MD5 99fbbd7df0585e0077627169f30b35ae
SHA1 e0ee2de4afdcb025090a8aa25de2ae5d6065ad4d
SHA512 aec9f01fe5bc31acd9635dcd134d899fed22a3bbf02dfec75b5c9a2fb579a03f724fa3b981bb8f607a149141ceecbc6cb88c728b8379edb2152d116b9cf9e925
SSDEEP 384:myRVpKJT3jP3ivs48x6ZcJIYsJG4uHeNfV4qYpnEgC5Zaan:tK8vK6ZlYsg48iTYpheZaa
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

PW.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b1218070600bf2fc65434b739eababf1d4f1001e04c36aec840951a4c431284f
MD5 343a967dc2f72aae5bd38e31853eb5bb
SHA1 157af1444dc283e384fad356a3720d4098371277
SHA512 325148520709b3468f0cc568d08af5f56191994f8ebdc03c1764e5128b9b7eb8c722cdeb0bec0b9ccbc48e0f54178625155041ad551ede9cdb0fa5de2480414f
SSDEEP 768:5cRBRihvbNR0duUmQMpSEcJtoUXy+Pgt8:5PhvbLUmxpSZocy+ot8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

38910

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\N A P O L E O N\My Projects\Revenge-RAT\Revenge-RAT v.0.3\Revenge-RAT v.0.3\Plugins\PW\PW\obj\Debug\PW.pdb

Revenge-RAT v0.3/Revenge-RAT v0.3/Plugin/RD.dll

SHA256 160ca753cd850647bae699a40cab21deed96cd1b73a4d1c14924aaef0a81aa8a
MD5 2ac8b3cf8d900994bf6c76dcd31af4cb
SHA1 311146a4bf214ca70c6e2db919f42e0215da21ef
SHA512 120d9f2cbab25d53de16f66956f8c7c6aed9df9d7b4457dfb93a1ccc6cf832d71b43b9a6339767ee756d2c6798ab8fb73708aba8542a64e69f8e854e9939d790
SSDEEP 192:K2xZBlvPfMPmyvT50gjxMicFWcrlO/PYdb0qb8jJS6:jvPfMPm+TigBcF03YzboJ9
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

RD.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 53e975a0e865c9de8b77dfd156006f34d2d8d7d2a749906a126b6ceefb410fa4
MD5 38dfadb39dec9f434044c8c51385c238
SHA1 9b43f121e80eefe0766502427668e7be7b3fbe7b
SHA512 8bc4f990a448c398275426d61a48c608b4ed0000bd735701d4d8452efaa324cea089d7395849ed6121a5efdaf8a0d4de21f403c51c91a707668f4d34707dbc69
SSDEEP 192:cXW6fEIBY/1UL0fiB4KAvjdsCKulq/OBOXZ88wEbRO83MquVDFPlxB+:qZ8IZBAvNfByZ88wqO83ruFv
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

18478

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\N A P O L E O N\My Projects\Revenge-RAT\Revenge-RAT v.0.3\Revenge-RAT v.0.3\Plugins\RD\RD\obj\Debug\RD.pdb

Revenge-RAT v0.3/Revenge-RAT v0.3/Plugin/RW.dll

SHA256 430240ff2185c7836152edbee5eebe3d9ba597b6ddebfcb91cdcf90437002300
MD5 ffe47110f6531e3519196a2da839fa6a
SHA1 e3316d50f4a37b5db40dea13b58d8130f2e0e590
SHA512 9dda22cebfbe8ee54692c4559d3f40b8de7ef7f80bbaa487230c49e8ec70347b0272d78ede1e9f6f50ee9ec08d72cc40b82a8714bb20efe4c9d0be6496567157
SSDEEP 768:s6qtCa/wX2aO3h5Kg+TxZIrou+3wKB8W5L:XkCa2bOx52oEu6BL5L
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Plugin/SC.dll

SHA256 edf24004e879e42d855d18b0b8b43cef63f6b0ecc47b2050857673359913843c
MD5 f003d358765e32183f7155d31051f39e
SHA1 72c8b00985518e06e4dccf7b428557bd8150fa93
SHA512 5562d3edb589a736e14fcfa8f47a0f39c4cbc11b0d1726e7c036c1033972100b8e32312ae3ff149fc011c1ed9f006099519f39622d648b946449dd0052af21fc
SSDEEP 192:K2xYBK4PJjfkbGfn4X8y+w2CfA06xOjI/gxZy+bxgIISLbWfaCMIHG:6BKKJjciPcBxpfE0I4xQ+bxgoVCMD
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Plugin/SI.dll

SHA256 681ec596b81fb09909912050b80525f963ca3a3711a944f990201a22796cbb13
MD5 3bc9f9ed0608c44a95bd8b69103cb703
SHA1 cdc9960472d35bb901eaf087f610580115d594ad
SHA512 d2c236bae02f29756c6f79b9d1e84683c8d9fa604b44060867d9dba0339a431b04b1cd29693675bb0c597c1adee4519a8a7653d0b1b6c3b24fe2a33a17ecf8f2
SSDEEP 768:bKSZAs22sUQhUFcGGWC3iYqqxYb6vZr9ClK3pGxe:btp9nQScGGF3iY7xRvZrolc0xe
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Plugin/SM.dll

SHA256 318a8be21a3c004ddac0d972843be45ce779a1022e34444239d426f489e9a89e
MD5 0e1f278cba7497b97301151599e3415b
SHA1 72b7e03b3c7a72a59863d7d577419242577dc8a6
SHA512 8453eb3257e5bcc7313b24bad8ef23eb37eb268e86c5edf393d81f8559e95d6786b16efd69ac54dc4616679bf3d7e3c7804ed130826769c9831579724211e981
SSDEEP 768:95WMfW4FBIdb6QXvGIxgF1K8Kgk23SDOvaWLFCKo1A:7WM+QBIdGWvGIxgFw8Vk2Yww/A
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Plugin/SP.dll

SHA256 a96b2ca32e93c6f55df730fe841bd0c91d44dc53c1367866aff6b68d649dc727
MD5 3f1b742a5665ce4bf93c20134dc6a031
SHA1 5b5090585b42098e8ba3de49a4e0db67db8bd96b
SHA512 2104a02ef0da66e21583b3fd593c7213c90fe0b2141208556b79d8ca88d9e9fd60be9da123cfaaabaf7082a12c76d56b68efb40bc40e50b47bcd0d061c4e82a6
SSDEEP 192:K2x5OQi5jJq6/eHG8iQItDwft1c2/B7mWjAjrcF0i:LQ5jkoeHRiQuD0/HAjrc3
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Plugin/SPC.dll

SHA256 656869266d1ff994eb996d0b72549e9d7b9bd0b03e02aa73835a9bda0794e177
MD5 aea0e66363781ef1ecfc15bedb0af00f
SHA1 3cf307414b657f70c73e53dde9e98cc0e20820e5
SHA512 51560c92d8cc7676e82f38a3684f1b1bf9d9598dad2515ef8fb50dc44ca2b4698061c76157444da1ee211447afc5bb339be29566df029943aed841d9de594270
SSDEEP 384:p3ER/3FY6KaqRnakb/QqxvmGhS8mOvxJIOHos:p3OmRaAakboRGFmOIs
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Plugin/TS.dll

SHA256 aa2b11b1230abd42f18e147d68f8f1ba1804b5f798466d7cbea74c8ebe945ebf
MD5 d90582a613fdaa71b6635185478c5f26
SHA1 6ede4ab8ebeb9b1733ef7485dc5c7a6ff5013c09
SHA512 2ca8edc32394d407c9a2bbd0b52f0c3af6f41ba2f1ad658bdcbdd1805086fec28847ba52ea07a48bea2f07060dd4b8948d44b75436ed213c7c7aea27fd0efb10
SSDEEP 192:K2xRTKbBQxbEyJAEoUbfC7mbF9QphAS4RyB/lnMdA73hyT0EB:HGbBQxbZdoUbfN9aqSdtnWA73MTX
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Profiles/Default.ini

SHA256 af284dc1749507263e9404a2b053ed4496e455cd6d63d23f31941b378d57548b
MD5 0f5a74e40edc7f9a5544096997156986
SHA1 92cb89bc1573124b36534b29fa6820ba75fb7fb6
SHA512 c504b10f3dd3136cb72fcac41820044153d37cf2c13a4b708dbe76a2ad2b9d1b405b0b7c15ead9e1e4a45c7ba8eb412fae18f8951e6da3eefa5a788b0fb59437
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/RV.IL

SHA256 417b0e4d04ce140c61d27a5c594e9d8517f7a29ebed969449e8dd631ab4d46fd
MD5 87ef5264d817caab9561d951df11e36b
SHA1 baea95528dc00cb6009c82031c98633d7968e0f3
SHA512 694e4d61382866d4a71b000e6d66d0778a75b332096fdb4ec7ba422e0ceda5302dba51b55c29904d5d9ad35f51c434e48b6b3267173ba4f2896196945f2c079c
SSDEEP 6144:AxVxFcv2Wpz0IW9SqEdSFX/js6Vurh954+P7niN1ux2zlrvYCFNbJQuRYklPmtlz:+VxFcv2Wpz0IW9SqEdSFX/js6Vurh955
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Revenge-RAT Client Source Code.rar

SHA256 1d3df82a6ed50d00e20cafad0d49eee9cb52b802bb50c47efae701a9826adde0
MD5 f575ce3112d6fe75e7b3b08700950410
SHA1 b951f3cad793f85e078b43c7c8d7f39a005e5868
SHA512 902661a7078acfcf9478b8d0603ad983a822b2e7f2f22b18005bddbcac23e9ef77ddff42bbb891be5e207b483d88155ad6df0a8e13eec36cc2d5d75dbee06fd2
SSDEEP 192:oSULgy1RgxNfAsnnRFTMUfT82BJv6IP12oE2+qVUdBWTC5ldZ77XCngNmfjk+zGM:A1RcTMUrpBNbUJvWTC5ldZ7u7kCGm8Y
MD5 SHA1 SHA512 SSDEEP

Revenge-RAT v0.3/Revenge-RAT v0.3/Revenge-RAT v0.3.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 6b2324bb337f722067e6c1b5cef5f64e89338e2beccf95289aaaa2af8a0556b9
MD5 531d8b4ac8f7eb827d62424169321b2b
SHA1 a269563cbfa32b667f89d709eebc0b6c08b57272
SHA512 24fb3d7430cdd6fa4a80af2982f4334db722e97a0286e97bfc56600d27598710962641837a368a133d6f6a4bd8372f00e9dd49e9c79de14653cbf7360c3e2872
SSDEEP 98304:HsCsgsZshXVTRZjqFzlV2QpEBjPpRctHtbNqteTzsx9os5nsdhT9s:TRZjq7gwtW9Zi
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

14039710

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\N A P O L E O N\My Projects\Revenge-RAT\Revenge-RAT v.0.3\Revenge-RAT v.0.3\Client\Client\obj\Debug\Revenge-RAT v0.3.pdb

Revenge-RAT v0.3/Revenge-RAT v0.3/Theme Compiler.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 19c95ad5cf50f8c8273fcd4179c4878ebede832f9234955ac4fd4233b5b6a693
MD5 32ca48211b21af0bcc003d4433319671
SHA1 17e7c3362bc9663ddd10a1add0b5f42bbe51bf83
SHA512 7ce094cd520e5074ec45b9eb23a09e2adc177233de0f17e63cdca124817c3dab4e412c3868aaf24b3efdf67ab7c7f00409bceb38ed5fcfbfc7673de3632b866e
SSDEEP 6144:qu7c7YdbMKsPcomyThwq1+wtmNG6M1OmN:qu7XdbM50omyhVAi
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

472814

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\N A P O L E O N\My Projects\Revenge-RAT\Revenge-RAT v.0.3\Revenge-RAT v.0.3\Theme Compiler\Theme Compiler\obj\Debug\Theme Compiler.pdb

Revenge-RAT v0.3/Revenge-RAT v0.3/Themes/Black Currant.XML

SHA256 e953cd65c56fa3848cba1572c5766a47be69f8f519a45326c37f526ba9e2cb8e
MD5 4e5dc68d6168af8399d04442d74145c4
SHA1 eda0a678b7cb5b0eafd64fa73af794d24a8b02e0
SHA512 351710eb3f82d9b5925c1a4f09e1fff2404f2c952100c3094062be8e63527410a4f7245fa9e0a819be0172eab893261b7371fe2e55e7aa0dd2330c402c13a6ae
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Themes/Corduroy.XML

SHA256 4cbe4a1df14b150281b3636a751f50dfade3448a0eafff26ecfb8de9fd81d2a7
MD5 e48661ec9a9b4914ccc8836366753556
SHA1 6f49769894c77afdc36a8108033f0e2113d57904
SHA512 2b218bf0972510fa57ff29fcd5f07d8f8d46abde79fd573f5d345cedc6bd8ba930d033210c4e1f8ca982795891ea008ac6500b3c9a637310bd12774cfdcd6352
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Themes/Dark Slate Blue.XML

SHA256 a83fadea949a896d506213f3c31048fa02f866051d9029865d6ae6cf60f12eaa
MD5 e2666998ea1e3d5759fef5b33d2fc4b3
SHA1 c2df53811cd95006ebc68ed42d4ebdad3d3b6ec0
SHA512 40f2f4d3ca733385b60dbcd7f73df555c6dbbc8bd3c67689e216d1f91eb06c0977f61a50061198becb8eee2422aa18824d49d42132e36e9cb4f25f4a95989053
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Themes/Darkness.XML

SHA256 ff9f34923477e9b14d440128bcdb1493c5d3cd3e14a678c03c513c8c8671b797
MD5 bdbb24f3eb43ea76f3cc62ca47b71c56
SHA1 d8fb3be90031f06198fb1f461eaf6daf988d148a
SHA512 5ccf99637dc13667e5a760d90ca221b5d272e468769ec39e96a9763476a77b86e6910e1f00d78e8ff78d204f4bd5fb4a4e72e3877b22887a9c52b826dd03b856
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Themes/Default.XML

SHA256 3326565ce090db3de87b4c930386aa4986117be00bfa1ad054d5aaf01d37afc5
MD5 65c7b18de137d7c38505e73980ca4852
SHA1 b65bfe6c0baaeec99325b346c5be0dd345fab7fe
SHA512 85f55e44e77ffd5d2e0c92b63c2299ffec10af2f171cb27bd82f79a8b1f96795eeb38f47d65b2ba6bdcecd935197b3d5e24f8cd06c8f88a29c4d3f11c2c87fd7
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Themes/Ebony.XML

SHA256 65138e1515c3f21056c19af59c79084383cb9e0d5aff159d561d8e3dfe15c244
MD5 8cddc8395708c6f2f0ed9ff5817b3201
SHA1 821086724518c502ca4a1435dd89ffd86167162b
SHA512 e0998defa6d64f188ae95e4ee26b304603567b05c674421a6393a25cb509c629533ae0a0ff90be5f1e259b4cd34e24fdc7566dc1b13fd097cd4e9d0f274ff682
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Themes/Gondola.XML

SHA256 59850d1d64aef66cca10169eadc941c0c07394404c292b40bbb92684338f1f2c
MD5 0e70063cc02860fe24aed57e325fbdc2
SHA1 02ddf6433f186a4a3bc41053dfcf082d39870c16
SHA512 30ca0673a352063ef0bf54fdff40015f106205d37e6e535ec4fa21f6287230f0e646fc149ee036a86e93f1007fbdc0e1e7b50a9f60d67f6fec0ddc221bd92a44
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Themes/Gray.XML

SHA256 fe54f90353b890477bb07d69f383d7f631b9564de0ee6ecf63155b61ca612654
MD5 bb4be08c15ee773ffa06b4017dd84d2f
SHA1 ccea62b36f7df4fbb2931ecfed54c006868d443f
SHA512 e6bdcb7189ce3c8f3e4c29fce43600db74c63f0997dee018d96ea8be9b23737524f8376197beef0db401cf59ea1fcc6181cbec1e9f2fae759a3e199ae521f404
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Themes/Light Sea Green.XML

SHA256 a76279e5120024079a6f948d0e1ba2b8102ac213c5e5b6e99a13fa57f949af11
MD5 f0b54e6d28eed274fa8f7341900549c6
SHA1 726ea609bf9708220653e0a96c745d5bd37d2d7c
SHA512 27f8cfabcd5442155d1b3827c780eebbbd7049f836023baaf2f4a08843192c8a5216d2529f36f854dad5464399bfd838e61bf6c7fb41b52f03d1fe7ae2eb196b
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Themes/Night Fury.XML

SHA256 56e94804d06cf78bde53cae3d3fd5b2abb6e6db0e2e8ff916710a802745a83ef
MD5 304425f7c8f6bf0e749f835a6eb12eb2
SHA1 01a470b52ea8015c9f828cedf6a7edbf49e781ce
SHA512 a8ca3a95734c4db77691ad563dd0720901095f49c3bb034e6a2897e95cb7b2d53bb8b366b29c82f5d88835052b001701c4a73974b9140fa439405fd1eb1adfc1
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Themes/Spring Green.XML

SHA256 349528c534441093aa7c8af7914fb67f41c72f255a8fa3d474a3664b4bcdf60d
MD5 0ee215e3586681e206925b52211fe4aa
SHA1 5a9913f882af2c0aa7b8954b7b69b274176da1aa
SHA512 32a4f34c9bdc9bbb1ccd180fae9875be4e58e71251f0d028bc635202cef49db957a7ec91758702c037b35438c704be3ccece69f1f4622ede881c4d03a55701c9
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Themes/Steel Blue.XML

SHA256 0e8982ccd45f101394b18cc6a24f3279bf5590127c2a0fdb8f2c1d8ee1a8e947
MD5 9d33a3324f79ae9bdcc515a774d3a3c9
SHA1 30292c5e44cd7876c3846734ec621f57fe032544
SHA512 8beb44ba915ed5bfbf8c08adf2c106f03f8d00891fb8ca49a433a35eb2df9ee83ec968b5c0bac181d1e33834ba5da5c9a8233f5287508cc29fcece495f9178a2
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Themes/THE MYSTERIES LEGACY.XML

SHA256 c11675603733e573abae89719871cfbdbbca7f26c407c5347e429b08e282a05d
MD5 347f44a5bb965440c21f9d69904b3f5e
SHA1 f3bb046c87e32fa715c8e362fb427b53acd03b81
SHA512 923f1cf3fe1922864028c9490eaee90e1fa97d9f9b27ac3fbce74d1436d45c009883b199523e0fd0a7426dd1f7d9f07986aafc398a7ba6e0df2f0d82bade45c0
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Themes/Teal.XML

SHA256 8c149b57525d8609016a4661154af890529b69165a09524f8d2120dd4ae5d321
MD5 ab4e89626ed25d9a0a8538a7a980571c
SHA1 89112988551a0893598e765b096e21be7139c70a
SHA512 934baf3c3701e5e501934a7535a0c3bfc10cb10c95fa3370f4d1a80dd40c183b724a62869300d9f27d1f9e5cb28cab3057a270d75aafdf7d574e6a9f06fca51a
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Themes/Tsunamii.XML

SHA256 180a2458f1aa0e900206a4dc273c7a3824ded24042b376c8700934443a3e985c
MD5 58effb78bb57a8006d616814919fd02a
SHA1 c4048337adcf47bc3f5748ac80370b1228eb15db
SHA512 968c1b059dd61572689321373daf9a8d179c67bdcefd656087430082c03d07c86fbe3d8a6492c1fd3fe4fc9507851d2bab55a8eb785c7690dcbc87dad9f72ede
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Themes/v_B01 - 3hud.XML

SHA256 4c633507586ea65fd5e143e1b96d3a6f16c230bf3e82b9eb486eafbea569b2cb
MD5 a5adf904687069482a8ac81f776a275f
SHA1 51e12f54470ee76b1179775c9639eb717aaf8c80
SHA512 9a888d8584460147c80c35f9c09770fdd527d2d3118d15d70d8db62cbb10267ad9c875b9e149046a7706f4accbbf18867c71551aed5d4878ae8d583b74c44667
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Users/Guest_7E0198F9/Logs/2018-04-03/5-52-15 下午.Log

SHA256 5d687c2a554fcffcb9f3e8415fe24274e2ec9b7154efde9a9d19073a7fa56771
MD5 5a7dcc463995db0ceb8cc9fe6963a6bc
SHA1 27d6b051b592b02bc2a31033d019702ed4f8a087
SHA512 5b871b87060b797eb00ee03b2ef46164125a97c19e76f58d84c3db9d962c934fc4831c67276422f3cb70d07bebd31bbe87727581f0d5d88bfecac754e9c618f9
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Users/Guest_7E0198F9/Logs/2018-04-03/5-53-30 下午.Log

SHA256 6cf9191f790f3174ed99b2ecfe4fb403a243bc5d864ab20b026eb961e5397e3a
MD5 d95e3f1eece0534cf0d73834f75c680e
SHA1 ffbe383d2f22aea4980127c75c66973f266fdc2b
SHA512 1385d90cb5c1d8b4b67d82773b99d6fe74f1d868ae20046ead20cdbcf3917dffd1cde1090bf33058391f457bfde6dc26d9e8f80e65ca8b269ea3d49dacdee86b
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/Users/Guest_7E0198F9/Logs/2018-04-03/5-54-41 下午.Log

SHA256 9f2f22dad94d3f7a151c1b663210a9b3c067534505491c791389a5c761b2fa8a
MD5 dd7465cc8ba6c3672af811f21813268f
SHA1 d59ff50c7ee510989abc964d219c199caea9c19c
SHA512 607b2ec4329ebad0f557e7a96e837b8d0b20ceb9273a9d5d5be1b4538b90fb03d4e891d312c8c4c13b122ad4422f94c081b46af82530a1751086ef69b0edadaf
MD5 SHA1 SHA512

Revenge-RAT v0.3/Revenge-RAT v0.3/WinMM.Net.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 59e2ac1b79840274bdfcef412a10058654e42f4285d732d1487e65e60ffbfb46
MD5 d4b80052c7b4093e10ce1f40ce74f707
SHA1 2494a38f1c0d3a0aa9b31cf0650337cacc655697
SHA512 3813b81f741ae3adb07ae370e817597ed2803680841ccc7549babb727910c7bff4f8450670d0ca19a0d09e06f133a1aaefecf5b5620e1b0bdb6bcd409982c450
SSDEEP 768:LyasDzF2TDSemqD9tGI+ffwj2Au0LVpqmf7KxcOOrYCPTxqPb85:LyaXKemqD9tGI+ffwj2Au0LVpq4KWrlv
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

50302

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Revenge-RAT v0.3/Revenge-RAT v0.3/notify.wav

SHA256 ae3684178d84f55c1626f94f32d1fb07d3785ed77449185166710ea5ba7f456b
MD5 ab9e930917aa4bcc064d8d08399cab67
SHA1 2473d8289f6526832179eaa141a6bbb99019492c
SHA512 079b5ad641e713c31f03952e531edf62efde09931d5dbb6ee48a33a7799f72dd37bd92cb55c2de4df7340b81cdcf8cf3cc9ab2fc2dcc993a754c9d9aa9c6d298
SSDEEP 3072:PzddBCOLJGd4e3GWmtTfa2gujnv8guMmXPxc5L:P5dNJXLpmBguN
MD5 SHA1 SHA512 SSDEEP

Sharing

General

Malware Config

Extracted

Signatures

File Explorer

Revenge-RATv0.32.zip

Revenge-RAT v0.3/Revenge-RAT v0.3/AForge.Video.DirectShow.dll

mscoree

dotnet

Revenge-RAT v0.3/Revenge-RAT v0.3/AForge.Video.dll

mscoree

dotnet

Revenge-RAT v0.3/Revenge-RAT v0.3/Client.exe

mscoree

dotnet

Revenge-RAT v0.3/Revenge-RAT v0.3/Config.XML

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-04-03/3-19-15 下午.log

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-04-03/3-20-34 下午.log

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-04-03/3-21-49 下午.log

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-04-03/4-17-58 下午.log

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-04-03/4-18-56 下午.log

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-04-03/5-06-44 下午.log

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-04-03/5-07-42 下午.log

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-04-03/5-51-08 下午.log

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-04-03/5-51-45 下午.log

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-04-03/5-53-06 下午.log

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-04-03/5-54-01 下午.log

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-04-04/11-04-02 上午.log

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-04-04/11-05-14 上午.log

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-04-04/11-06-03 上午.log

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-04-04/9-58-57 上午.log

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-04-04/9-59-59 上午.log

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-05-06/10-59-40 下午.log

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-05-06/11-00-48 下午.log

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-05-06/11-01-55 下午.log

Revenge-RAT v0.3/Revenge-RAT v0.3/Database/2018-05-06/11-03-15 下午.log

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/AHK/AHK.ahk

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/AHK/Ahk2Exe.exe

kernel32

wsock32

winmm

version

comctl32

psapi

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

generic

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/AHK/AutoHotkeySC.bin

wsock32

winmm

version

comctl32

psapi

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

generic

Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/AHK/Unicode 32-bit.bin

wsock32

winmm

version

comctl32

psapi

kernel32

user32

gdi32

comdlg32

advapi32

shell32