blacknet | BlackNET3[.]0[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

BlackNET3.0.zip
Size

5.2MB
MD5

a7dfb0c455c9705320886b4424420b15
SHA1

028ec593d6f2dedce2c35f21371f07ac3c0493df
SHA256

ac7072393954166ba117b8886328c562ea512e3482beabe159e8cd007054f980
SHA512

001ce1cadf73280f329e127f7508cd0d81e6d2f051250f5294b3bcd8ffed3261baf9be91722878edba5823a417cdde5b31e25f3fad2136fed95e8368f9149978
SSDEEP

98304:cgKWc1y2eFMMkGQ2NbP1vMxHTIZ0aIRHPwyJpj2swtrGQ7gpA/ExP3CazuI0h0zP:HKW6MBNb9vMxHe2vNJBmNgpA/JazO2zP

Score

10^/10

[id]blacknet

Malware Config

Extracted

Family

blacknet

Botnet

[ID]

[HOST]

Mutex

[MUTEX]

Attributes

antivm
false
elevate_uac
false
install_name
[Install_Name]
splitter
|BN|
start_name
[StartupName]
startup
false
usb_spread
false

Signatures

BlackNET payload 1 IoCs

resource	yara_rule
static1/unpack001/Builder/stub.exe	family_blacknet

Blacknet family
blacknet

Contains code to disable Windows Defender 1 IoCs

A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

resource	yara_rule
static1/unpack001/Builder/stub.exe	disable_win_def

Unsigned PE 13 IoCs

Checks for missing Authenticode signature.

resource
unpack001/BlackNET Panel/plugins/PasswordStealer.dll
unpack001/Builder/BlackNET Builder.exe
unpack001/Builder/Mono.Cecil.dll
unpack001/Builder/Packer/Confuser.Core.dll
unpack001/Builder/Packer/Confuser.DynCipher.dll
unpack001/Builder/Packer/Confuser.Protections.dll
unpack001/Builder/Packer/Confuser.Renamer.dll
unpack001/Builder/Packer/Confuser.Runtime.dll
unpack001/Builder/Packer/Confuser.exe
unpack001/Builder/Packer/System.Windows.Interactivity.dll
unpack001/Builder/Packer/dnlib.dll
unpack001/Builder/stub.exe
unpack001/Builder/watcher.exe

Files

BlackNET3.0.zip
.zip
BlackNET Panel/.user.ini
BlackNET Panel/asset/.htaccess
BlackNET Panel/asset/css/bootstrap-switch.css
BlackNET Panel/asset/css/sb-admin.css
BlackNET Panel/asset/css/sb-admin.min.css
BlackNET Panel/asset/index.php
.html
BlackNET Panel/asset/js/bootstrap-switch/bootstrap-switch.js
.js
BlackNET Panel/asset/js/bootstrap-switch/highlight.js
.js
BlackNET Panel/asset/js/bootstrap-switch/main.js
.js
BlackNET Panel/asset/js/datamaps.world.min.js
.js
BlackNET Panel/asset/js/demo/datatables-demo.js
.js
BlackNET Panel/asset/js/sb-admin.js
.js
BlackNET Panel/asset/js/sb-admin.min.js
.js
BlackNET Panel/asset/vendor/bootstrap/css/bootstrap-grid.css
BlackNET Panel/asset/vendor/bootstrap/css/bootstrap-grid.min.css
BlackNET Panel/asset/vendor/bootstrap/css/bootstrap-reboot.css
BlackNET Panel/asset/vendor/bootstrap/css/bootstrap-reboot.min.css
BlackNET Panel/asset/vendor/bootstrap/css/bootstrap.css
BlackNET Panel/asset/vendor/bootstrap/css/bootstrap.min.css
BlackNET Panel/asset/vendor/bootstrap/js/bootstrap.bundle.js
.js
BlackNET Panel/asset/vendor/bootstrap/js/bootstrap.bundle.min.js
.js
BlackNET Panel/asset/vendor/bootstrap/js/bootstrap.js
.js
BlackNET Panel/asset/vendor/bootstrap/js/bootstrap.min.js
.js
BlackNET Panel/asset/vendor/datatables/dataTables.bootstrap4.css
BlackNET Panel/asset/vendor/datatables/dataTables.bootstrap4.js
.js
BlackNET Panel/asset/vendor/datatables/dataTables.bootstrap4.min.css
BlackNET Panel/asset/vendor/datatables/dataTables.bootstrap4.min.js
.js
BlackNET Panel/asset/vendor/datatables/jquery.dataTables.js
.js
BlackNET Panel/asset/vendor/datatables/jquery.dataTables.min.js
.js
BlackNET Panel/asset/vendor/fontawesome-free/LICENSE.txt
BlackNET Panel/asset/vendor/fontawesome-free/css/all.css
BlackNET Panel/asset/vendor/fontawesome-free/css/all.min.css
BlackNET Panel/asset/vendor/fontawesome-free/css/brands.css
BlackNET Panel/asset/vendor/fontawesome-free/css/brands.min.css
BlackNET Panel/asset/vendor/fontawesome-free/css/fontawesome.css
BlackNET Panel/asset/vendor/fontawesome-free/css/fontawesome.min.css
BlackNET Panel/asset/vendor/fontawesome-free/css/regular.css
BlackNET Panel/asset/vendor/fontawesome-free/css/regular.min.css
BlackNET Panel/asset/vendor/fontawesome-free/css/solid.css
BlackNET Panel/asset/vendor/fontawesome-free/css/solid.min.css
BlackNET Panel/asset/vendor/fontawesome-free/css/svg-with-js.css
BlackNET Panel/asset/vendor/fontawesome-free/css/svg-with-js.min.css
BlackNET Panel/asset/vendor/fontawesome-free/css/v4-shims.css
BlackNET Panel/asset/vendor/fontawesome-free/css/v4-shims.min.css
BlackNET Panel/asset/vendor/fontawesome-free/js/all.js
.js
BlackNET Panel/asset/vendor/fontawesome-free/js/all.min.js
.js
BlackNET Panel/asset/vendor/fontawesome-free/js/brands.js
.js
BlackNET Panel/asset/vendor/fontawesome-free/js/brands.min.js
.js
BlackNET Panel/asset/vendor/fontawesome-free/js/conflict-detection.js
.js
BlackNET Panel/asset/vendor/fontawesome-free/js/conflict-detection.min.js
.js
BlackNET Panel/asset/vendor/fontawesome-free/js/fontawesome.js
.js
BlackNET Panel/asset/vendor/fontawesome-free/js/fontawesome.min.js
.js
BlackNET Panel/asset/vendor/fontawesome-free/js/regular.js
.js
BlackNET Panel/asset/vendor/fontawesome-free/js/regular.min.js
.js
BlackNET Panel/asset/vendor/fontawesome-free/js/solid.js
.js
BlackNET Panel/asset/vendor/fontawesome-free/js/solid.min.js
.js
BlackNET Panel/asset/vendor/fontawesome-free/js/v4-shims.js
.js
BlackNET Panel/asset/vendor/fontawesome-free/js/v4-shims.min.js
.js
BlackNET Panel/asset/vendor/fontawesome-free/webfonts/fa-brands-400.eot
BlackNET Panel/asset/vendor/fontawesome-free/webfonts/fa-brands-400.svg
.xml
BlackNET Panel/asset/vendor/fontawesome-free/webfonts/fa-brands-400.ttf
BlackNET Panel/asset/vendor/fontawesome-free/webfonts/fa-brands-400.woff
BlackNET Panel/asset/vendor/fontawesome-free/webfonts/fa-brands-400.woff2
BlackNET Panel/asset/vendor/fontawesome-free/webfonts/fa-regular-400.eot
BlackNET Panel/asset/vendor/fontawesome-free/webfonts/fa-regular-400.svg
.xml
BlackNET Panel/asset/vendor/fontawesome-free/webfonts/fa-regular-400.ttf
BlackNET Panel/asset/vendor/fontawesome-free/webfonts/fa-regular-400.woff
BlackNET Panel/asset/vendor/fontawesome-free/webfonts/fa-regular-400.woff2
BlackNET Panel/asset/vendor/fontawesome-free/webfonts/fa-solid-900.eot
BlackNET Panel/asset/vendor/fontawesome-free/webfonts/fa-solid-900.svg
.xml
BlackNET Panel/asset/vendor/fontawesome-free/webfonts/fa-solid-900.ttf
BlackNET Panel/asset/vendor/fontawesome-free/webfonts/fa-solid-900.woff
BlackNET Panel/asset/vendor/fontawesome-free/webfonts/fa-solid-900.woff2
BlackNET Panel/asset/vendor/jquery-easing/jquery.easing.compatibility.js
BlackNET Panel/asset/vendor/jquery-easing/jquery.easing.js
.js
BlackNET Panel/asset/vendor/jquery-easing/jquery.easing.min.js
.js
BlackNET Panel/asset/vendor/jquery/jquery.js
.js
BlackNET Panel/asset/vendor/jquery/jquery.min.js
.js
BlackNET Panel/asset/vendor/jquery/jquery.min.map
BlackNET Panel/asset/vendor/jquery/jquery.slim.js
.js
BlackNET Panel/asset/vendor/jquery/jquery.slim.min.js
.js
BlackNET Panel/asset/vendor/jquery/jquery.slim.min.map
BlackNET Panel/asset/vendor/jvector/css/jvector.css
BlackNET Panel/asset/vendor/jvector/js/core.js
.js
BlackNET Panel/asset/vendor/jvector/js/world.js
BlackNET Panel/asset/vendor/responsive/css/responsive.bootstrap4.css
BlackNET Panel/asset/vendor/responsive/css/responsive.bootstrap4.min.css
BlackNET Panel/asset/vendor/responsive/css/responsive.dataTables.css
BlackNET Panel/asset/vendor/responsive/css/responsive.dataTables.min.css
BlackNET Panel/asset/vendor/responsive/js/dataTables.responsive.js
.js
BlackNET Panel/asset/vendor/responsive/js/dataTables.responsive.min.js
.js
BlackNET Panel/asset/vendor/responsive/js/responsive.bootstrap4.js
.js
BlackNET Panel/asset/vendor/responsive/js/responsive.bootstrap4.min.js
.js
BlackNET Panel/auth.php
BlackNET Panel/authsettings.php
BlackNET Panel/blacknet.sql
BlackNET Panel/changePassword.php
BlackNET Panel/check_panel.php
.js
BlackNET Panel/classes/.htaccess
BlackNET Panel/classes/Auth.php
BlackNET Panel/classes/Clients.php
.js
BlackNET Panel/classes/Database.php
.js
BlackNET Panel/classes/Mailer.php
.js
BlackNET Panel/classes/POST.php
.js
BlackNET Panel/classes/ResetPassword.php
.js
BlackNET Panel/classes/Settings.php
BlackNET Panel/classes/Update.php
.js
BlackNET Panel/classes/User.php
.js
BlackNET Panel/classes/Utils.php
BlackNET Panel/classes/blackupload/Upload.php
BlackNET Panel/classes/blackupload/extension.json
BlackNET Panel/classes/blackupload/forbidden.json
BlackNET Panel/classes/blackupload/mime.json
BlackNET Panel/classes/index.php
.html
BlackNET Panel/components/clientsList.php
BlackNET Panel/components/commandController.php
.js
BlackNET Panel/components/commands.php
BlackNET Panel/components/css.php
BlackNET Panel/components/footer.php
BlackNET Panel/components/header.php
BlackNET Panel/components/js.php
.html
BlackNET Panel/components/meta.php
BlackNET Panel/components/stats.php
BlackNET Panel/connection.php
.js
BlackNET Panel/counter.php
BlackNET Panel/error_logs/.htaccess
BlackNET Panel/error_logs/index.php
.html
BlackNET Panel/expire.php
.html
BlackNET Panel/favico.png
.png
BlackNET Panel/flags/.htaccess
BlackNET Panel/flags/X.png
.png
BlackNET Panel/flags/ad.png
.png
BlackNET Panel/flags/ae.png
.png
BlackNET Panel/flags/af.png
.png
BlackNET Panel/flags/ag.png
.png
BlackNET Panel/flags/ai.png
.png
BlackNET Panel/flags/al.png
.png
BlackNET Panel/flags/am.png
.png
BlackNET Panel/flags/an.png
.png
BlackNET Panel/flags/ao.png
.png
BlackNET Panel/flags/ar.png
.png
BlackNET Panel/flags/as.png
.png
BlackNET Panel/flags/at.png
.png
BlackNET Panel/flags/au.png
.png
BlackNET Panel/flags/aw.png
.png
BlackNET Panel/flags/ax.png
.png
BlackNET Panel/flags/az.png
.png
BlackNET Panel/flags/ba.png
.png
BlackNET Panel/flags/bb.png
.png
BlackNET Panel/flags/bd.png
.png
BlackNET Panel/flags/be.png
.png
BlackNET Panel/flags/bf.png
.png
BlackNET Panel/flags/bg.png
.png
BlackNET Panel/flags/bh.png
.png
BlackNET Panel/flags/bi.png
.png
BlackNET Panel/flags/bj.png
.png
BlackNET Panel/flags/bm.png
.png
BlackNET Panel/flags/bn.png
.png
BlackNET Panel/flags/bo.png
.png
BlackNET Panel/flags/br.png
.png
BlackNET Panel/flags/bs.png
.png
BlackNET Panel/flags/bt.png
.png
BlackNET Panel/flags/bv.png
.png
BlackNET Panel/flags/bw.png
.png
BlackNET Panel/flags/by.png
.png
BlackNET Panel/flags/bz.png
.png
BlackNET Panel/flags/ca.png
.png
BlackNET Panel/flags/catalonia.png
.png
BlackNET Panel/flags/cc.png
.png
BlackNET Panel/flags/cd.png
.png
BlackNET Panel/flags/cf.png
.png
BlackNET Panel/flags/cg.png
.png
BlackNET Panel/flags/ch.png
.png
BlackNET Panel/flags/ci.png
.png
BlackNET Panel/flags/ck.png
.png
BlackNET Panel/flags/cl.png
.png
BlackNET Panel/flags/cm.png
.png
BlackNET Panel/flags/cn.png
.png
BlackNET Panel/flags/co.png
.png
BlackNET Panel/flags/cr.png
.png
BlackNET Panel/flags/cs.png
.png
BlackNET Panel/flags/cu.png
.png
BlackNET Panel/flags/cv.png
.png
BlackNET Panel/flags/cx.png
.png
BlackNET Panel/flags/cy.png
.png
BlackNET Panel/flags/cz.png
.png
BlackNET Panel/flags/de.png
.png
BlackNET Panel/flags/dj.png
.png
BlackNET Panel/flags/dk.png
.png
BlackNET Panel/flags/dm.png
.png
BlackNET Panel/flags/do.png
.png
BlackNET Panel/flags/dz.png
.png
BlackNET Panel/flags/ec.png
.png
BlackNET Panel/flags/ee.png
.png
BlackNET Panel/flags/eg.png
.png
BlackNET Panel/flags/eh.png
.png
BlackNET Panel/flags/en.png
.png
BlackNET Panel/flags/er.png
.png
BlackNET Panel/flags/es.png
.png
BlackNET Panel/flags/et.png
.png
BlackNET Panel/flags/fi.png
.png
BlackNET Panel/flags/fj.png
.png
BlackNET Panel/flags/fk.png
.png
BlackNET Panel/flags/fm.png
.png
BlackNET Panel/flags/fo.png
.png
BlackNET Panel/flags/fr.png
.png
BlackNET Panel/flags/ga.png
.png
BlackNET Panel/flags/gb.png
.png
BlackNET Panel/flags/gd.png
.png
BlackNET Panel/flags/ge.png
.png
BlackNET Panel/flags/gf.png
.png
BlackNET Panel/flags/gh.png
.png
BlackNET Panel/flags/gi.png
.png
BlackNET Panel/flags/gl.png
.png
BlackNET Panel/flags/gm.png
.png
BlackNET Panel/flags/gn.png
.png
BlackNET Panel/flags/gp.png
.png
BlackNET Panel/flags/gq.png
.png
BlackNET Panel/flags/gr.png
.png
BlackNET Panel/flags/gs.png
.png
BlackNET Panel/flags/gt.png
.png
BlackNET Panel/flags/gu.png
.png
BlackNET Panel/flags/gw.png
.png
BlackNET Panel/flags/gy.png
.png
BlackNET Panel/flags/hk.png
.png
BlackNET Panel/flags/hm.png
.png
BlackNET Panel/flags/hn.png
.png
BlackNET Panel/flags/hr.png
.png
BlackNET Panel/flags/ht.png
.png
BlackNET Panel/flags/hu.png
.png
BlackNET Panel/flags/id.png
.png
BlackNET Panel/flags/ie.png
.png
BlackNET Panel/flags/il.png
.png
BlackNET Panel/flags/in.png
.png
BlackNET Panel/flags/index.php
.html
BlackNET Panel/flags/io.png
.png
BlackNET Panel/flags/iq.png
.png
BlackNET Panel/flags/ir.png
.png
BlackNET Panel/flags/is.png
.png
BlackNET Panel/flags/it.png
.png
BlackNET Panel/flags/jm.png
.png
BlackNET Panel/flags/jo.png
.png
BlackNET Panel/flags/jp.png
.png
BlackNET Panel/flags/ke.png
.png
BlackNET Panel/flags/kg.png
.png
BlackNET Panel/flags/kh.png
.png
BlackNET Panel/flags/ki.png
.png
BlackNET Panel/flags/km.png
.png
BlackNET Panel/flags/kn.png
.png
BlackNET Panel/flags/kp.png
.png
BlackNET Panel/flags/kr.png
.png
BlackNET Panel/flags/kw.png
.png
BlackNET Panel/flags/ky.png
.png
BlackNET Panel/flags/kz.png
.png
BlackNET Panel/flags/la.png
.png
BlackNET Panel/flags/lb.png
.png
BlackNET Panel/flags/lc.png
.png
BlackNET Panel/flags/li.png
.png
BlackNET Panel/flags/lk.png
.png
BlackNET Panel/flags/lr.png
.png
BlackNET Panel/flags/ls.png
.png
BlackNET Panel/flags/lt.png
.png
BlackNET Panel/flags/lu.png
.png
BlackNET Panel/flags/lv.png
.png
BlackNET Panel/flags/ly.png
.png
BlackNET Panel/flags/ma.png
.png
BlackNET Panel/flags/mc.png
.png
BlackNET Panel/flags/md.png
.png
BlackNET Panel/flags/me.png
.png
BlackNET Panel/flags/mg.png
.png
BlackNET Panel/flags/mh.png
.png
BlackNET Panel/flags/mk.png
.png
BlackNET Panel/flags/ml.png
.png
BlackNET Panel/flags/mm.png
.png
BlackNET Panel/flags/mn.png
.png
BlackNET Panel/flags/mo.png
.png
BlackNET Panel/flags/mp.png
.png
BlackNET Panel/flags/mq.png
.png
BlackNET Panel/flags/mr.png
.png
BlackNET Panel/flags/ms.png
.png
BlackNET Panel/flags/mt.png
.png
BlackNET Panel/flags/mu.png
.png
BlackNET Panel/flags/mv.png
.png
BlackNET Panel/flags/mw.png
.png
BlackNET Panel/flags/mx.png
.png
BlackNET Panel/flags/my.png
.png
BlackNET Panel/flags/mz.png
.png
BlackNET Panel/flags/na.png
.png
BlackNET Panel/flags/nc.png
.png
BlackNET Panel/flags/ne.png
.png
BlackNET Panel/flags/nf.png
.png
BlackNET Panel/flags/ng.png
.png
BlackNET Panel/flags/ni.png
.png
BlackNET Panel/flags/nl.png
.png
BlackNET Panel/flags/no.png
.png
BlackNET Panel/flags/np.png
.png
BlackNET Panel/flags/nr.png
.png
BlackNET Panel/flags/nu.png
.png
BlackNET Panel/flags/nz.png
.png
BlackNET Panel/flags/om.png
.png
BlackNET Panel/flags/pa.png
.png
BlackNET Panel/flags/pe.png
.png
BlackNET Panel/flags/pf.png
.png
BlackNET Panel/flags/pg.png
.png
BlackNET Panel/flags/ph.png
.png
BlackNET Panel/flags/pk.png
.png
BlackNET Panel/flags/pl.png
.png
BlackNET Panel/flags/pm.png
.png
BlackNET Panel/flags/pn.png
.png
BlackNET Panel/flags/pr.png
.png
BlackNET Panel/flags/ps.png
.png
BlackNET Panel/flags/pt.png
.png
BlackNET Panel/flags/pw.png
.png
BlackNET Panel/flags/py.png
.png
BlackNET Panel/flags/qa.png
.png
BlackNET Panel/flags/re.png
.png
BlackNET Panel/flags/ro.png
.png
BlackNET Panel/flags/rs.png
.png
BlackNET Panel/flags/ru.png
.png
BlackNET Panel/flags/rw.png
.png
BlackNET Panel/flags/sa.png
.png
BlackNET Panel/flags/sb.png
.png
BlackNET Panel/flags/sc.png
.png
BlackNET Panel/flags/scotland.png
.png
BlackNET Panel/flags/sd.png
.png
BlackNET Panel/flags/se.png
.png
BlackNET Panel/flags/sg.png
.png
BlackNET Panel/flags/sh.png
.png
BlackNET Panel/flags/si.png
.png
BlackNET Panel/flags/sj.png
.png
BlackNET Panel/flags/sk.png
.png
BlackNET Panel/flags/sl.png
.png
BlackNET Panel/flags/sm.png
.png
BlackNET Panel/flags/sn.png
.png
BlackNET Panel/flags/so.png
.png
BlackNET Panel/flags/sr.png
.png
BlackNET Panel/flags/st.png
.png
BlackNET Panel/flags/sv.png
.png
BlackNET Panel/flags/sy.png
.png
BlackNET Panel/flags/sz.png
.png
BlackNET Panel/flags/tc.png
.png
BlackNET Panel/flags/td.png
.png
BlackNET Panel/flags/tf.png
.png
BlackNET Panel/flags/tg.png
.png
BlackNET Panel/flags/th.png
.png
BlackNET Panel/flags/tj.png
.png
BlackNET Panel/flags/tk.png
.png
BlackNET Panel/flags/tl.png
.png
BlackNET Panel/flags/tm.png
.png
BlackNET Panel/flags/tn.png
.png
BlackNET Panel/flags/to.png
.png
BlackNET Panel/flags/tr.png
.png
BlackNET Panel/flags/tt.png
.png
BlackNET Panel/flags/tv.png
.png
BlackNET Panel/flags/tw.png
.png
BlackNET Panel/flags/tz.png
.png
BlackNET Panel/flags/ua.png
.png
BlackNET Panel/flags/ug.png
.png
BlackNET Panel/flags/um.png
.png
BlackNET Panel/flags/us.png
.png
BlackNET Panel/flags/uy.png
.png
BlackNET Panel/flags/uz.png
.png
BlackNET Panel/flags/va.png
.png
BlackNET Panel/flags/vc.png
.png
BlackNET Panel/flags/ve.png
.png
BlackNET Panel/flags/vg.png
.png
BlackNET Panel/flags/vi.png
.png
BlackNET Panel/flags/vn.png
.png
BlackNET Panel/flags/vu.png
.png
BlackNET Panel/flags/wf.png
.png
BlackNET Panel/flags/wl.png
.png
BlackNET Panel/flags/ws.png
.png
BlackNET Panel/flags/ye.png
.png
BlackNET Panel/flags/yt.png
.png
BlackNET Panel/flags/za.png
.png
BlackNET Panel/flags/zm.png
.png
BlackNET Panel/flags/zw.png
.png
BlackNET Panel/forgot-password.php
BlackNET Panel/getCommand.php
BlackNET Panel/getcontery.php
BlackNET Panel/imgs/.htaccess
BlackNET Panel/imgs/index.php
.html
BlackNET Panel/imgs/offline.png
.png
BlackNET Panel/imgs/online.png
.png
BlackNET Panel/imgs/placeholder.jpg
.jpg
BlackNET Panel/includes/.htaccess
BlackNET Panel/includes/deleteLogs.php
BlackNET Panel/includes/index.php
.html
BlackNET Panel/includes/updateAuth.php
BlackNET Panel/includes/updatePassword.php
BlackNET Panel/includes/updateSettings.php
BlackNET Panel/index.php
.js
BlackNET Panel/install.php
BlackNET Panel/jobs/ping.php
.sh linux
BlackNET Panel/login.php
BlackNET Panel/logout.php
BlackNET Panel/menus/.htaccess
BlackNET Panel/menus/ddos_attack.html
BlackNET Panel/menus/execute.html
BlackNET Panel/menus/index.php
.html
BlackNET Panel/menus/messagebox.html
BlackNET Panel/menus/move_bot.html
BlackNET Panel/menus/openpage.html
BlackNET Panel/menus/stop_ddos.html
BlackNET Panel/menus/update_client.html
BlackNET Panel/menus/upload.html
BlackNET Panel/php.ini
BlackNET Panel/plugins/.htaccess
BlackNET Panel/plugins/PasswordStealer.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Black.Hacker\Desktop\BlackNET\PasswordStealer\PasswordStealer\obj\Debug\PasswordStealer.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BlackNET Panel/plugins/index.php
.html
BlackNET Panel/post.php
.js
BlackNET Panel/question.php
BlackNET Panel/receive.php
.js
BlackNET Panel/reset.php
BlackNET Panel/rmfile.php
.js
BlackNET Panel/scripts/.htaccess
BlackNET Panel/scripts/index.php
.html
BlackNET Panel/sendcommand.php
BlackNET Panel/session.php
BlackNET Panel/settings.php
BlackNET Panel/update.php
BlackNET Panel/upload.php
.js
BlackNET Panel/upload/.htaccess
BlackNET Panel/upload/index.php
.html
BlackNET Panel/vendor/.htaccess
BlackNET Panel/vendor/auth/FixedBitNotation.php
.ps1
BlackNET Panel/vendor/auth/GoogleAuthenticator.php
BlackNET Panel/vendor/auth/GoogleQrUrl.php
BlackNET Panel/vendor/auth/RuntimeException.php
BlackNET Panel/vendor/index.php
.html
BlackNET Panel/vendor/phpmailer/phpmailer/get_oauth_token.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-af.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-am.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-ar.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-az.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-ba.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-be.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-bg.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-ca.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-ch.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-cs.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-da.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-de.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-el.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-eo.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-es.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-et.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-fa.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-fi.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-fo.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-fr.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-gl.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-he.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-hi.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-hr.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-hu.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-id.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-it.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-ja.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-ka.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-ko.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-lt.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-lv.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-mg.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-ms.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-nb.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-nl.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-pl.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-pt.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-pt_br.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-ro.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-ru.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-sk.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-sl.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-sr.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-sv.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-tl.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-tr.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-uk.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-vi.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-zh.php
BlackNET Panel/vendor/phpmailer/phpmailer/language/phpmailer.lang-zh_cn.php
BlackNET Panel/vendor/phpmailer/phpmailer/src/Exception.php
BlackNET Panel/vendor/phpmailer/phpmailer/src/OAuth.php
BlackNET Panel/vendor/phpmailer/phpmailer/src/PHPMailer.php
.js
BlackNET Panel/vendor/phpmailer/phpmailer/src/POP3.php
.js
BlackNET Panel/vendor/phpmailer/phpmailer/src/SMTP.php
.js
BlackNET Panel/viewlogs.php
.js
BlackNET Panel/viewpasswords.php
BlackNET Panel/viewuploads.php
.js
Builder/BlackNET Builder.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Black.Hacker\Desktop\BlackNET\BlackNET - Source Code\BlackNet Builder\BlackNet Builder\obj\Release\BlackNET Builder.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 548KB - Virtual size: 547KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 209KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Builder/Mono.Cecil.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\sources\cecil\obj\Release\net40\Mono.Cecil.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 333KB - Virtual size: 333KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Builder/Packer/Confuser.Core.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\Source\Public\Confuser2\Confuser.Core\obj\Release\Confuser.Core.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 177KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Builder/Packer/Confuser.DynCipher.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\Source\Public\Confuser2\Confuser.DynCipher\obj\Release\Confuser.DynCipher.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Builder/Packer/Confuser.Protections.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\Source\Public\Confuser2\Confuser.Protections\obj\Release\Confuser.Protections.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Builder/Packer/Confuser.Renamer.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\Source\Public\Confuser2\Confuser.Renamer\obj\Release\Confuser.Renamer.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 301KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Builder/Packer/Confuser.Runtime.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\Source\Public\Confuser2\Confuser.Runtime\obj\Release\Confuser.Runtime.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Builder/Packer/Confuser.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\Source\Public\Confuser2\Confuser.CLI\obj\Release\Confuser.CLI.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Builder/Packer/Microsoft.Practices.ServiceLocation.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:33:e5:27:86:a3:0e:4a:2a:80:00:00:00:00:00:33
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

27/03/2013, 20:08

Not After

27/06/2014, 20:08

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

24/01/2013, 22:33

Not After

24/04/2014, 22:33

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cd:22:fe:05:fc:8b:ec:8a:ef:4e:ee:cf:cf:07:ef:3d:35:f5:93:ec
Signer

Actual PE Digest

cd:22:fe:05:fc:8b:ec:8a:ef:4e:ee:cf:cf:07:ef:3d:35:f5:93:ec

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Projects\CommonServiceLocator\main\Microsoft.Practices.ServiceLocation.PortableClassLibrary\obj\Release\Microsoft.Practices.ServiceLocation.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Builder/Packer/System.Windows.Interactivity.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\ExpressionRTM\Sparkle\SDK\BlendWPFSDK\Build\Intermediate\Release\Libraries\System.Windows.Interactivity\Win32\Release\System.Windows.Interactivity.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Builder/Packer/dnlib.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Source\Public\Confuser2\dnlib\src\obj\Release\dnlib.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 985KB - Virtual size: 984KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Builder/stub.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Black.Hacker\Desktop\BlackNET\BlackNET - Source Code\PHPStub\PHPStub\obj\Release\svchost.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Builder/watcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Black.Hacker\Desktop\BlackNET\WatcherService\WatcherService\obj\Debug\svchost.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Extracted

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 19KB - Virtual size: 18KB

.sdata Size: 512B - Virtual size: 312B

.rsrc Size: 12KB - Virtual size: 11KB

.reloc Size: 512B - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 548KB - Virtual size: 547KB

.sdata Size: 512B - Virtual size: 312B

.rsrc Size: 209KB - Virtual size: 209KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 333KB - Virtual size: 333KB

.rsrc Size: 1024B - Virtual size: 840B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 177KB - Virtual size: 176KB

.rsrc Size: 1024B - Virtual size: 936B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 44KB - Virtual size: 43KB

.rsrc Size: 1024B - Virtual size: 1000B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 126KB - Virtual size: 125KB

.rsrc Size: 1024B - Virtual size: 1000B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

.text
Size: 19KB - Virtual size: 18KB

.sdata
Size: 512B - Virtual size: 312B

.rsrc
Size: 12KB - Virtual size: 11KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 548KB - Virtual size: 547KB

.sdata
Size: 512B - Virtual size: 312B

.rsrc
Size: 209KB - Virtual size: 209KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 333KB - Virtual size: 333KB

.rsrc
Size: 1024B - Virtual size: 840B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 177KB - Virtual size: 176KB

.rsrc
Size: 1024B - Virtual size: 936B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 44KB - Virtual size: 43KB

.rsrc
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 126KB - Virtual size: 125KB

.rsrc
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 301KB - Virtual size: 300KB

.rsrc
Size: 1024B - Virtual size: 968B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 40KB - Virtual size: 39KB

.rsrc
Size: 1024B - Virtual size: 960B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 25KB - Virtual size: 25KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:00:33:e5:27:86:a3:0e:4a:2a:80:00:00:00:00:00:33
Certificate

33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0
Certificate

61:33:26:1a:00:00:00:00:00:31
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

cd:22:fe:05:fc:8b:ec:8a:ef:4e:ee:cf:cf:07:ef:3d:35:f5:93:ec
Signer

.text
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 36KB - Virtual size: 36KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 985KB - Virtual size: 984KB

.rsrc
Size: 1024B - Virtual size: 896B