vanillarat | VanillaRAT-master[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

VanillaRAT-master.zip
Size

16.2MB
MD5

e5af33bcdd5d0f29501bbb443852c7a7
SHA1

1e3ddd5b70f9e2c43b12b7f9d7d24ebad385255d
SHA256

7128c6df6da94ece0b72e0781c497addbcac04e5af4b758325c21c3db28d45a0
SHA512

8cd917a1f3d7e4dfcc1800d51d6c5e3dded945f2ee280abdec976c1ca91f7077d8177d9e15330ca3191c6e80c060aae1a31454f34770c387c63e677882bca709
SSDEEP

393216:3TiK49992DWo4CsLQIv7kEPlb5H8jjC3xcY7tUQA8uTutK58U6t:3WJb92K7LtNlb5H83w57tFuStKCU6t

Score

10^/10

rat vanillarat

Malware Config

Signatures

Vanilla Rat payload 5 IoCs

rat

resource	yara_rule
static1/unpack001/VanillaRAT-master/VanillaRat/bin/Debug/VanillaStub.exe	vanillarat
static1/unpack002/VanillaStub.exe	vanillarat
static1/unpack001/VanillaRAT-master/VanillaStub/Forms/InitialForm.cs	vanillarat
static1/unpack001/VanillaRAT-master/VanillaStub/bin/Debug/VanillaStub.exe	vanillarat
static1/unpack001/VanillaRAT-master/VanillaStub/obj/Debug/VanillaStub.exe	vanillarat

Vanillarat family
vanillarat

Unsigned PE 33 IoCs

Checks for missing Authenticode signature.

resource
unpack001/VanillaRAT-master/VanillaRat/StreamLibrary.dll
unpack001/VanillaRAT-master/VanillaRat/bin/Debug/VanillaRat.exe
unpack001/VanillaRAT-master/VanillaRat/bin/Debug/VanillaStub.exe
unpack002/VanillaRat.exe
unpack002/VanillaStub.exe
unpack001/VanillaRAT-master/VanillaRat/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll
unpack001/VanillaRAT-master/VanillaRat/obj/Debug/VanillaRat.exe
unpack001/VanillaRAT-master/VanillaStub/bin/Debug/VanillaStub.exe
unpack001/VanillaRAT-master/VanillaStub/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll
unpack001/VanillaRAT-master/VanillaStub/obj/Debug/VanillaStub.exe
unpack001/VanillaRAT-master/packages/Costura.Fody.3.3.2/lib/net40/Costura.dll
unpack001/VanillaRAT-master/packages/Costura.Fody.3.3.2/netclassicweaver/Costura.Fody.dll
unpack001/VanillaRAT-master/packages/Costura.Fody.3.3.2/netstandardweaver/Costura.Fody.dll
unpack001/VanillaRAT-master/packages/Fody.3.3.5/netclassictask/Fody.dll
unpack001/VanillaRAT-master/packages/Fody.3.3.5/netclassictask/FodyCommon.dll
unpack001/VanillaRAT-master/packages/Fody.3.3.5/netclassictask/FodyHelpers.dll
unpack001/VanillaRAT-master/packages/Fody.3.3.5/netclassictask/FodyIsolated.dll
unpack001/VanillaRAT-master/packages/Fody.3.3.5/netclassictask/Mono.Cecil.Mdb.dll
unpack001/VanillaRAT-master/packages/Fody.3.3.5/netclassictask/Mono.Cecil.Pdb.dll
unpack001/VanillaRAT-master/packages/Fody.3.3.5/netclassictask/Mono.Cecil.Rocks.dll
unpack001/VanillaRAT-master/packages/Fody.3.3.5/netclassictask/Mono.Cecil.dll
unpack001/VanillaRAT-master/packages/Fody.3.3.5/netstandardtask/Fody.dll
unpack001/VanillaRAT-master/packages/Fody.3.3.5/netstandardtask/FodyCommon.dll
unpack001/VanillaRAT-master/packages/Fody.3.3.5/netstandardtask/FodyHelpers.dll
unpack001/VanillaRAT-master/packages/Fody.3.3.5/netstandardtask/FodyIsolated.dll
unpack001/VanillaRAT-master/packages/Fody.3.3.5/netstandardtask/Mono.Cecil.Mdb.dll
unpack001/VanillaRAT-master/packages/Fody.3.3.5/netstandardtask/Mono.Cecil.Pdb.dll
unpack001/VanillaRAT-master/packages/Fody.3.3.5/netstandardtask/Mono.Cecil.Rocks.dll
unpack001/VanillaRAT-master/packages/Fody.3.3.5/netstandardtask/Mono.Cecil.dll
unpack001/VanillaRAT-master/packages/dnlib.3.1.0/lib/net35/dnlib.dll
unpack001/VanillaRAT-master/packages/dnlib.3.1.0/lib/net461/dnlib.dll
unpack001/VanillaRAT-master/packages/dnlib.3.1.0/lib/netcoreapp2.1/dnlib.dll
unpack001/VanillaRAT-master/packages/dnlib.3.1.0/lib/netstandard2.0/dnlib.dll

Files

VanillaRAT-master.zip
.zip
VanillaRAT-master/.vs/VanillaRat/v15/.suo
VanillaRAT-master/.vs/VanillaRat/v15/Server/sqlite3/storage.ide
VanillaRAT-master/.vs/VanillaRat/v15/Server/sqlite3/storage.ide-shm
VanillaRAT-master/.vs/VanillaRat/v15/Server/sqlite3/storage.ide-wal
VanillaRAT-master/.vs/config/applicationhost.config
.xml
VanillaRAT-master/Banner.png
.png
VanillaRAT-master/LICENSE
VanillaRAT-master/README.md
VanillaRAT-master/Screenshot.png
.png
VanillaRAT-master/VanillaRat.sln
VanillaRAT-master/VanillaRat.sln.DotSettings.user
VanillaRAT-master/VanillaRat/App.config
VanillaRAT-master/VanillaRat/Classes/AutoClosingMsgBox.cs
VanillaRAT-master/VanillaRat/Classes/Builder.cs
.js
VanillaRAT-master/VanillaRat/Classes/Notification.cs
VanillaRAT-master/VanillaRat/Classes/Server.cs
VanillaRAT-master/VanillaRat/Classes/Settings.cs
VanillaRAT-master/VanillaRat/Classes/Telepathy/Client.cs
.js
VanillaRAT-master/VanillaRat/Classes/Telepathy/Common.cs
.js
VanillaRAT-master/VanillaRat/Classes/Telepathy/EventType.cs
VanillaRAT-master/VanillaRat/Classes/Telepathy/Logger.cs
VanillaRAT-master/VanillaRat/Classes/Telepathy/Message.cs
VanillaRAT-master/VanillaRat/Classes/Telepathy/NetworkStreamExtensions.cs
.js
VanillaRAT-master/VanillaRat/Classes/Telepathy/SafeQueue.cs
VanillaRAT-master/VanillaRat/Classes/Telepathy/Server.cs
.js
VanillaRAT-master/VanillaRat/Classes/Telepathy/Utils.cs
VanillaRAT-master/VanillaRat/Classes/TempDataHelper.cs
VanillaRAT-master/VanillaRat/ClientSettings.cs
VanillaRAT-master/VanillaRat/FodyWeavers.xml
VanillaRAT-master/VanillaRat/FodyWeavers.xsd
VanillaRAT-master/VanillaRat/Forms/AudioRecorder.Designer.cs
VanillaRAT-master/VanillaRat/Forms/AudioRecorder.cs
VanillaRAT-master/VanillaRat/Forms/AudioRecorder.resx
.vbs
VanillaRAT-master/VanillaRat/Forms/BuilderForm.Designer.cs
VanillaRAT-master/VanillaRat/Forms/BuilderForm.cs
.js
VanillaRAT-master/VanillaRat/Forms/BuilderForm.resx
.vbs
VanillaRAT-master/VanillaRat/Forms/Chat.Designer.cs
VanillaRAT-master/VanillaRat/Forms/Chat.cs
VanillaRAT-master/VanillaRat/Forms/Chat.resx
.vbs
VanillaRAT-master/VanillaRat/Forms/ClientRunningApps.Designer.cs
VanillaRAT-master/VanillaRat/Forms/ClientRunningApps.cs
VanillaRAT-master/VanillaRat/Forms/ClientRunningApps.resx
.vbs
VanillaRAT-master/VanillaRat/Forms/ClipboardTextViewer.Designer.cs
VanillaRAT-master/VanillaRat/Forms/ClipboardTextViewer.cs
VanillaRAT-master/VanillaRat/Forms/ClipboardTextViewer.resx
.vbs
VanillaRAT-master/VanillaRat/Forms/ComputerInformation.Designer.cs
VanillaRAT-master/VanillaRat/Forms/ComputerInformation.cs
VanillaRAT-master/VanillaRat/Forms/ComputerInformation.resx
.vbs
VanillaRAT-master/VanillaRat/Forms/Controls/FlatPanel.Designer.cs
VanillaRAT-master/VanillaRat/Forms/Controls/FlatPanel.cs
VanillaRAT-master/VanillaRat/Forms/FileExplorer.Designer.cs
VanillaRAT-master/VanillaRat/Forms/FileExplorer.cs
.js
VanillaRAT-master/VanillaRat/Forms/FileExplorer.resx
.vbs
VanillaRAT-master/VanillaRat/Forms/HardwareUsageViewer.Designer.cs
VanillaRAT-master/VanillaRat/Forms/HardwareUsageViewer.cs
VanillaRAT-master/VanillaRat/Forms/HardwareUsageViewer.resx
.vbs
VanillaRAT-master/VanillaRat/Forms/Keylogger.Designer.cs
VanillaRAT-master/VanillaRat/Forms/Keylogger.cs
VanillaRAT-master/VanillaRat/Forms/Keylogger.resx
.vbs
VanillaRAT-master/VanillaRat/Forms/Main.Designer.cs
VanillaRAT-master/VanillaRat/Forms/Main.cs
.js
VanillaRAT-master/VanillaRat/Forms/Main.resx
.vbs
VanillaRAT-master/VanillaRat/Forms/NotificationBox.Designer.cs
VanillaRAT-master/VanillaRat/Forms/NotificationBox.cs
VanillaRAT-master/VanillaRat/Forms/NotificationBox.resx
.vbs
VanillaRAT-master/VanillaRat/Forms/OpenWebsite.Designer.cs
VanillaRAT-master/VanillaRat/Forms/OpenWebsite.cs
VanillaRAT-master/VanillaRat/Forms/OpenWebsite.resx
.vbs
VanillaRAT-master/VanillaRat/Forms/PasswordViewer.Designer.cs
VanillaRAT-master/VanillaRat/Forms/PasswordViewer.cs
VanillaRAT-master/VanillaRat/Forms/PasswordViewer.resx
.vbs
VanillaRAT-master/VanillaRat/Forms/RDC.Designer.cs
VanillaRAT-master/VanillaRat/Forms/RDC.cs
VanillaRAT-master/VanillaRat/Forms/RDC.resx
.vbs
VanillaRAT-master/VanillaRat/Forms/RemoteShell.Designer.cs
VanillaRAT-master/VanillaRat/Forms/RemoteShell.cs
VanillaRAT-master/VanillaRat/Forms/RemoteShell.resx
.vbs
VanillaRAT-master/VanillaRat/Forms/Resources/Administrative Tools_48px.png
.png
VanillaRAT-master/VanillaRat/Forms/Resources/Chat_48px.png
.png
VanillaRAT-master/VanillaRat/Forms/Resources/Click_Soft_00.wav
VanillaRAT-master/VanillaRat/Forms/Resources/Close Window_48px.png
.png
VanillaRAT-master/VanillaRat/Forms/Resources/Communication_48px.png
.png
VanillaRAT-master/VanillaRat/Forms/Resources/Compose_48px.png
.png
VanillaRAT-master/VanillaRat/Forms/Resources/Console_48px.png
.png
VanillaRAT-master/VanillaRat/Forms/Resources/Disconnected_48px.png
.png
VanillaRAT-master/VanillaRat/Forms/Resources/Document_48px.png
.png
VanillaRAT-master/VanillaRat/Forms/Resources/Double Up_48px.png
.png
VanillaRAT-master/VanillaRat/Forms/Resources/Download_48px.png
.png
VanillaRAT-master/VanillaRat/Forms/Resources/Eye_48px.png
.png
VanillaRAT-master/VanillaRat/Forms/Resources/Flash On_48px.png
.png
VanillaRAT-master/VanillaRat/Forms/Resources/Headphones_48px.png
.png
VanillaRAT-master/VanillaRat/Forms/Resources/Info_48px.png
.png
VanillaRAT-master/VanillaRat/Forms/Resources/Keyboard_48px.png
.png
VanillaRAT-master/VanillaRat/Forms/Resources/Laptop_48px.png
.png
VanillaRAT-master/VanillaRat/Forms/Resources/Lock Landscape_48px.png
.png
VanillaRAT-master/VanillaRat/Forms/Resources/Monitor_48px.png
.png
VanillaRAT-master/VanillaRat/Forms/Resources/Mouse_48px.png
.png
VanillaRAT-master/VanillaRat/Forms/Resources/Opened Folder_48px.png
.png
VanillaRAT-master/VanillaRat/Forms/Resources/Paper Plane_48px.png
.png
VanillaRAT-master/VanillaRat/Forms/Resources/Person_48px.png
.png
VanillaRAT-master/VanillaRat/Forms/Resources/Play_48px.png
.png
VanillaRAT-master/VanillaRat/Forms/Resources/Resize_48px.png
.png
VanillaRAT-master/VanillaRat/Forms/Resources/Restart_48px.png
.png
VanillaRAT-master/VanillaRat/Forms/Resources/Server_48px.png
.png
VanillaRAT-master/VanillaRat/Forms/Resources/Services_48px.png
.png
VanillaRAT-master/VanillaRat/Forms/Resources/Source Code_48px.png
.png
VanillaRAT-master/VanillaRat/Forms/Resources/Upload_48px.png
.png
VanillaRAT-master/VanillaRat/Forms/Resources/Website_48px.png
.png
VanillaRAT-master/VanillaRat/Forms/Resources/Windows Client_48px.png
.png
VanillaRAT-master/VanillaRat/Forms/SettingsForm.Designer.cs
VanillaRAT-master/VanillaRat/Forms/SettingsForm.cs
VanillaRAT-master/VanillaRat/Forms/SettingsForm.resx
.vbs
VanillaRAT-master/VanillaRat/Program.cs
VanillaRAT-master/VanillaRat/Properties/AssemblyInfo.cs
VanillaRAT-master/VanillaRat/Properties/Resources.Designer.cs
.vbs
VanillaRAT-master/VanillaRat/Properties/Resources.resx
.vbs
VanillaRAT-master/VanillaRat/Properties/Settings.Designer.cs
.vbs
VanillaRAT-master/VanillaRat/Properties/Settings.settings
VanillaRAT-master/VanillaRat/Settings.cs
VanillaRAT-master/VanillaRat/StreamLibrary.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\Anguis\Documents\GitHub\StreamLibrary\StreamLibrary\obj\Debug\StreamLibrary.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VanillaRAT-master/VanillaRat/VanillaRat.csproj
VanillaRAT-master/VanillaRat/VanillaRat.csproj.user
VanillaRAT-master/VanillaRat/bin/Debug/VanillaRat.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\dhuin\Desktop\Projects\C#\VanillaRat\VanillaRat\obj\Debug\VanillaRat.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 980KB - Virtual size: 979KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VanillaRAT-master/VanillaRat/bin/Debug/VanillaRat.exe.config
VanillaRAT-master/VanillaRat/bin/Debug/VanillaRat.pdb
VanillaRAT-master/VanillaRat/bin/Debug/VanillaStub.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\dhuin\Desktop\Projects\C#\VanillaRat\VanillaStub\obj\Debug\VanillaStub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VanillaRAT-master/VanillaRat/bin/Debug/dnlib.xml
.xml
VanillaRAT-master/VanillaRat/bin/Release.zip
.zip
VanillaRat.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\dhuin\Desktop\Projects\C#\VanillaRat\VanillaRat\obj\Debug\VanillaRat.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 980KB - Virtual size: 979KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VanillaRat.exe.config
VanillaRat.pdb
VanillaStub.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\dhuin\Desktop\Projects\C#\VanillaRat\VanillaStub\obj\Debug\VanillaStub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dnlib.xml
.xml
VanillaRAT-master/VanillaRat/obj/Debug/Costura/0142130198ACCF6E1C479D175B260285A868B6C9.costura.telepathy.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/0564FF7F7E6084BD6D02D8E6A4127D1C878B3FA6.costura.system.globalization.calendars.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/05E65EE95F647F38C717C73A0399870912DD374A.costura.system.threading.tasks.parallel.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/09D02B85A094E925AC3C5D8B1ACA096B730C160F.costura.system.xml.xmldocument.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/0B7A9EC0DFF6D958C9C64B5F592993372D31C5E9.costura.system.valuetuple.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/12419C25D1C2EB706A4E4E649EE353CEDA7446A9.costura.system.diagnostics.fileversioninfo.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/1420EF91F6E0F6954F373F1AC4079064398AB455.costura.system.net.sockets.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/15349E541122743A5D355946E48380AC1811B52F.costura.system.runtime.interopservices.runtimeinformation.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/16EB49AFCA84C9E6160B4E5B36F1EC5C98470C86.costura.system.io.filesystem.driveinfo.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/1BA9ECC598E170D779CEB290163AC88E6993935F.costura.system.net.ping.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/1C2CEFAFBA48BA7AAAB746F660DEBD34F2F4B14C.costura.system.net.http.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/20AEAED12DFB8D71E39687350EB12BC0DE372AF0.costura.system.componentmodel.primitives.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/2CB934305D3648FF29FDBC7D92485003F8458848.costura.system.net.nameresolution.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/2CB98F9622F57A0A9E037A378519AA6A271302F6.costura.system.globalization.extensions.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/2E32D50EC33EC6635681485B754F4E58D434A5EE.costura.system.componentmodel.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/2E6A3047BD3BCEE01F55D139A3C03E6D4D2DB14A.costura.system.runtime.interopservices.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/2EF7D0A222C3A3E564B3C72D5B71A5BE40A7ADEA.costura.system.diagnostics.process.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/311F52B31611E6DC5FD4C0159BFA452C22980CA7.costura.system.collections.concurrent.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/33AC74D6E549026736CBD35D466E7ABECDEAFB81.costura.streamlibrary.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/33D1EBD7212D747C8723CFB9E4292C99A641B964.costura.system.reflection.primitives.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/3946DFF0B68F0CA01689BD44C348559ADF548258.costura.system.text.encoding.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/3CA31DE7F0F0784559E5A73EBD0EFB42C34D18FC.costura.system.reflection.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/474944856DB781A34796BFCCE18ECD4580275AD1.costura.system.io.unmanagedmemorystream.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/48F227C62B2001C441BCBC5B570911F096DDF421.costura.system.io.isolatedstorage.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/49392F58BE6F5C97C5DE59BFC44F9CFCBE1E5DD7.costura.system.net.websockets.client.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/498F0FBBD2712F4F637BDB7370B2302FCC4966F3.costura.system.resources.reader.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/4D4AE0D2664025327F28400D917CC59AFD69F33A.costura.system.linq.parallel.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/4D923B100142AFA2E0A8B7ACDB3A6DE6FEB91148.costura.system.collections.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/4D93C7D7E6315CA2195ED73716996ADE8E17FBB2.costura.system.linq.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/5042EE630A6C7C2986E8323A14D052C1D83B6F61.costura.system.diagnostics.contracts.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/51E466218025126C5E524AFD2086F4AB0BF3660A.costura.system.diagnostics.tools.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/526C688E71A7D7410007AD5AA6EA8B83CACE76C5.costura.system.collections.nongeneric.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/5627E53D15E56868DC9082EDCAE5A653B96B9AF1.costura.system.linq.expressions.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/584B8683943A8E0AE98B10F452C94F6109D1C4EA.costura.system.runtime.handles.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/59FEB2AF0BE9EC4CCEC2125D2383E3E282F428A7.costura.costura.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/5AC34F02482BC2228F1175B9F3727C54F6B0A705.costura.dnlib.pdb.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/5E4158533532A27E03D0CCC9A0AF5E89FFFD8637.costura.system.net.security.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/5EA3F290ECDE1BAB983CEEE2417A688B7ED9B7F5.costura.system.threading.timer.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/5F3DA777AF01DBC159BD8D9D97D5DC105918AFC5.costura.system.componentmodel.eventbasedasync.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/609F31B98831327677E89E08BFF7D7322BA0F4A4.costura.system.io.compression.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/6523838EF4AAB39D0D3C0DF11C28ADA449EDD592.costura.system.net.webheadercollection.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/68C240D1A43DE1678EF13107B9300C544E9D5E4E.costura.system.io.filesystem.watcher.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/68E1AF02CDDD57B5581708984C2B4A35074982A3.costura.netstandard.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/7A6276348D85EAF00AE6958117797045929078CB.costura.system.runtime.compilerservices.visualc.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/7ADD96BAA123DB819F2F3D5AA62D6F872CE8FE14.costura.system.data.common.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/7B249C6390DFC90EF33F9A697174E363080091EF.costura.microsoft.win32.primitives.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/7D71B46BB9A28289384AA1EDF5CB03D64B3BCFF0.costura.system.runtime.extensions.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/7FE773332D0461A252E52BE720A7794FCAAC7BFB.costura.system.text.encoding.extensions.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/82BA1313448B431893C14D866F46D47B620514A9.costura.system.security.principal.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/846711D4161A3950FACDEF97037898A71F4EFDA1.costura.system.globalization.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/87C352153804FF5BD4F8AEF8851546F3CF22461E.costura.system.runtime.serialization.primitives.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/87ED79D195D8D93AE1155AF08857F751A7ECA245.costura.system.diagnostics.tracing.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/8A2FB74CF11719708774FC378D8B5BFCC541C986.costura.system.objectmodel.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/8BBB7BADAAA912C1F17775E9ACDCAB389704C772.costura.system.collections.specialized.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/90E196DCD76168F770ABE30098399BC5866ADF1B.costura.system.xml.xpath.xdocument.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/92BF07CCF32EB9FDF06F446A256E0271C4028BF0.costura.system.io.compression.zipfile.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/93702135DB0646B893BABE030BD8DC15549FF0C2.costura.system.appcontext.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/95699D187BF150D319CC64F90064301CAC57F338.costura.system.security.cryptography.algorithms.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/96314EC1A59E4BB53C5B609BF79AD4C998A7A988.costura.system.diagnostics.tracesource.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/97B62A3DBE2465B4C995E082AD6FF183F6267F59.costura.system.security.claims.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/9A66414D9D5C26852F44A7954C97B8416A244C7A.costura.darkui.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/9D5686CBF45E90DF5E11D87E7B90173A1A64B1A0.costura.system.console.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/A00954217CA326C54A863D451820263A6D7EE1AF.costura.system.io.pipes.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/A181F5CC93E9273D9169A9954A74D73BC1852980.costura.system.linq.queryable.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/A674C009A518FA67643E617EEC6BA54632EE876B.costura.dnlib.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/A67FDACEB10E828805A9E24FE0C59E1D73D19A7C.costura.system.security.cryptography.csp.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/A69238054BEE26063D32B85B797BC4E0C49F79D4.costura.system.security.cryptography.primitives.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/A6999C04B243B034F8EE7AD0D79F3CE24DF9A9D0.costura.system.io.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/A994C87352486D433A06943C01329DD721AB343F.costura.system.dynamic.runtime.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/AD55AF22E5479A5ADDF01D698138E5149270E3CF.costura.system.net.networkinformation.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/B0A8868D459FE0AF34D16C263CFE0202C414DC53.costura.system.security.cryptography.x509certificates.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/B1756DC750ED5CFD5D0BFC70CB899FD590867A0C.costura.system.resources.writer.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/B219DD45550762B54DAB46533D489C4755F55E0E.costura.system.net.primitives.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/B56C3D2E270B1C793A2EE17CAC9C98B178258E94.costura.system.net.requests.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/B6B8986FC1B5140817DE262AE4102499E37DAFFD.costura.system.runtime.serialization.formatters.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/B81FF87B407578EFBF184BDC10D0F101610379DB.costura.system.runtime.numerics.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/BBBB4C2C3911AE1F5BA7FAF1D632ED0F14D9B6AC.costura.system.xml.xmlserializer.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/BF2C1287F0EC04223CD17FE20AB2ECFFF18579E3.costura.system.threading.overlapped.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/BF83A7E98418BDE907DEAE8C0C0F3FB0F6C9DB1A.costura.system.resources.resourcemanager.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/BFA0E27BE1D56BA48918A9B7CA7090AF7779A10E.costura.system.io.filesystem.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/BFE2384A92B385665689AD5A72F23ABC8C022D82.costura.system.componentmodel.typeconverter.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/C2E4B19CB9A0B48E899512CD121FFE6657D41072.costura.system.text.regularexpressions.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/C3848473E42E2F9B4D0A00180EA9ADE654432587.costura.system.diagnostics.textwritertracelistener.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/C53132EC95A7211C1BB6DCD5AD21CCB150A7B923.costura.system.threading.thread.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/D707745E72D2F39374F2D28AF52AAAB7888B93AB.costura.system.drawing.primitives.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/D9DF77B4993418337894FF04C6B813224B9F8543.costura.system.io.memorymappedfiles.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/DDDA49572D112944EC9AB62B31959AA93A386618.costura.system.threading.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/DFAD52A9990B2FAFCE7098CEBB174927E8E0BA00.costura.system.xml.xdocument.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/E0FAD5EF75676B2ED7CF155AF6602B867FCED041.costura.system.net.websockets.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/EB8C010A35B461402C1C33133F1B61C78BE8425A.costura.system.diagnostics.debug.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/ED23E654968B3704A82F613B06BE5829E0CAAD70.costura.system.security.cryptography.encoding.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/ED25E94D4E88293345A0F28A5B975159C393B050.costura.system.xml.xpath.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/EE1AE416570911282ABDD3745674E58F9D469C9E.costura.system.runtime.serialization.json.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/EF317CACC230A58A3B2FCC6CC079CC763AFCC7C5.costura.system.xml.readerwriter.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/EF6B3CCFF90BEDDAB5CE6F60B4CC23F75EDFD009.costura.system.diagnostics.stacktrace.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/F3BD9B4108ACD42ABFB99A3A4760BFFCB84F6C28.costura.system.reflection.extensions.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/F434AF8CE30EAF5511E28C0230211F0D8ED4A154.costura.system.runtime.serialization.xml.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/F720109A38846E358BDE7C47D9C946A79D2B6B1C.costura.system.threading.tasks.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/F874903CEA9F08F1A0887949B47722E6BA81B789.costura.system.threading.threadpool.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/FCA2F72C039937357099CA6E167330E540F8335D.costura.system.io.filesystem.primitives.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/FD622ADE5CAE26353A22B6FA50A83669B72B6C41.costura.system.runtime.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/Costura/FF6E6BCD83A11D40BF53DABD0480A67AECFDCF50.costura.system.security.securestring.dll.compressed
VanillaRAT-master/VanillaRat/obj/Debug/DesignTimeResolveAssemblyReferences.cache
VanillaRAT-master/VanillaRat/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
VanillaRAT-master/VanillaRat/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VanillaRAT-master/VanillaRat/obj/Debug/VanillaRat.Forms.AudioRecorder.resources
VanillaRAT-master/VanillaRat/obj/Debug/VanillaRat.Forms.BuilderForm.resources
VanillaRAT-master/VanillaRat/obj/Debug/VanillaRat.Forms.Chat.resources
VanillaRAT-master/VanillaRat/obj/Debug/VanillaRat.Forms.ClientRunningApps.resources
VanillaRAT-master/VanillaRat/obj/Debug/VanillaRat.Forms.ClipboardTextViewer.resources
VanillaRAT-master/VanillaRat/obj/Debug/VanillaRat.Forms.ComputerInformation.resources
VanillaRAT-master/VanillaRat/obj/Debug/VanillaRat.Forms.FileExplorer.resources
VanillaRAT-master/VanillaRat/obj/Debug/VanillaRat.Forms.HardwareUsageViewer.resources
VanillaRAT-master/VanillaRat/obj/Debug/VanillaRat.Forms.Keylogger.resources
VanillaRAT-master/VanillaRat/obj/Debug/VanillaRat.Forms.NotificationBox.resources
VanillaRAT-master/VanillaRat/obj/Debug/VanillaRat.Forms.OpenWebsite.resources
VanillaRAT-master/VanillaRat/obj/Debug/VanillaRat.Forms.PasswordViewer.resources
VanillaRAT-master/VanillaRat/obj/Debug/VanillaRat.Forms.RDC.resources
VanillaRAT-master/VanillaRat/obj/Debug/VanillaRat.Forms.RemoteDesktopViewer.resources
VanillaRAT-master/VanillaRat/obj/Debug/VanillaRat.Forms.RemoteShell.resources
VanillaRAT-master/VanillaRat/obj/Debug/VanillaRat.Forms.SettingsForm.resources
VanillaRAT-master/VanillaRat/obj/Debug/VanillaRat.Main.resources
VanillaRAT-master/VanillaRat/obj/Debug/VanillaRat.Properties.Resources.resources
VanillaRAT-master/VanillaRat/obj/Debug/VanillaRat.csproj.CoreCompileInputs.cache
VanillaRAT-master/VanillaRat/obj/Debug/VanillaRat.csproj.FileListAbsolute.txt
VanillaRAT-master/VanillaRat/obj/Debug/VanillaRat.csproj.Fody.CopyLocal.cache
VanillaRAT-master/VanillaRat/obj/Debug/VanillaRat.csproj.GenerateResource.cache
VanillaRAT-master/VanillaRat/obj/Debug/VanillaRat.csprojAssemblyReference.cache
VanillaRAT-master/VanillaRat/obj/Debug/VanillaRat.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\dhuin\Desktop\Projects\C#\VanillaRat\VanillaRat\obj\Debug\VanillaRat.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 980KB - Virtual size: 979KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VanillaRAT-master/VanillaRat/obj/Debug/VanillaRat.pdb
VanillaRAT-master/VanillaRat/obj/x64/Debug/DesignTimeResolveAssemblyReferencesInput.cache
VanillaRAT-master/VanillaRat/obj/x64/Debug/VanillaRat.csproj.CoreCompileInputs.cache
VanillaRAT-master/VanillaRat/obj/x64/Release/DesignTimeResolveAssemblyReferencesInput.cache
VanillaRAT-master/VanillaRat/obj/x64/Release/VanillaRat.csproj.CoreCompileInputs.cache
VanillaRAT-master/VanillaRat/packages.config
VanillaRAT-master/VanillaRatDemo.gif
.gif
VanillaRAT-master/VanillaStub/App.config
.xml
VanillaRAT-master/VanillaStub/ClientSettings.cs
VanillaRAT-master/VanillaStub/Forms/Chat.Designer.cs
VanillaRAT-master/VanillaStub/Forms/Chat.cs
VanillaRAT-master/VanillaStub/Forms/Chat.resx
.vbs
VanillaRAT-master/VanillaStub/Forms/IScreenLocker.cs
VanillaRAT-master/VanillaStub/Forms/InitialForm.Designer.cs
VanillaRAT-master/VanillaStub/Forms/InitialForm.cs
.js
VanillaRAT-master/VanillaStub/Forms/InitialForm.resx
.vbs
VanillaRAT-master/VanillaStub/Forms/ScreenLock.Designer.cs
VanillaRAT-master/VanillaStub/Forms/ScreenLock.cs
VanillaRAT-master/VanillaStub/Forms/ScreenLock.resx
.vbs
VanillaRAT-master/VanillaStub/Helpers/Enums.cs
VanillaRAT-master/VanillaStub/Helpers/Information/ComputerInfo.cs
.js
VanillaRAT-master/VanillaStub/Helpers/Information/GeoInfo.cs
VanillaRAT-master/VanillaStub/Helpers/Networking/Networking.cs
VanillaRAT-master/VanillaStub/Helpers/Networking/Telepathy/Client.cs
.js
VanillaRAT-master/VanillaStub/Helpers/Networking/Telepathy/Common.cs
.js
VanillaRAT-master/VanillaStub/Helpers/Networking/Telepathy/EventType.cs
VanillaRAT-master/VanillaStub/Helpers/Networking/Telepathy/Logger.cs
VanillaRAT-master/VanillaStub/Helpers/Networking/Telepathy/Message.cs
VanillaRAT-master/VanillaStub/Helpers/Networking/Telepathy/NetworkStreamExtensions.cs
.js
VanillaRAT-master/VanillaStub/Helpers/Networking/Telepathy/SafeQueue.cs
VanillaRAT-master/VanillaStub/Helpers/Networking/Telepathy/Server.cs
.js
VanillaRAT-master/VanillaStub/Helpers/Networking/Telepathy/Utils.cs
VanillaRAT-master/VanillaStub/Helpers/Services/AntiProcess.cs
VanillaRAT-master/VanillaStub/Helpers/Services/InputSimulator/IInputDeviceStateAdaptor.cs
VanillaRAT-master/VanillaStub/Helpers/Services/InputSimulator/IInputMessageDispatcher.cs
VanillaRAT-master/VanillaStub/Helpers/Services/InputSimulator/IInputSimulator.cs
VanillaRAT-master/VanillaStub/Helpers/Services/InputSimulator/IKeyboardSimulator.cs
VanillaRAT-master/VanillaStub/Helpers/Services/InputSimulator/IMouseSimulator.cs
VanillaRAT-master/VanillaStub/Helpers/Services/InputSimulator/InputBuilder.cs
.js
VanillaRAT-master/VanillaStub/Helpers/Services/InputSimulator/InputSimulator.cs
VanillaRAT-master/VanillaStub/Helpers/Services/InputSimulator/KeyboardSimulator.cs
.js
VanillaRAT-master/VanillaStub/Helpers/Services/InputSimulator/MouseButton.cs
VanillaRAT-master/VanillaStub/Helpers/Services/InputSimulator/MouseSimulator.cs
.js
VanillaRAT-master/VanillaStub/Helpers/Services/InputSimulator/Native/HARDWAREINPUT.cs
VanillaRAT-master/VanillaStub/Helpers/Services/InputSimulator/Native/INPUT.cs
VanillaRAT-master/VanillaStub/Helpers/Services/InputSimulator/Native/InputType.cs
VanillaRAT-master/VanillaStub/Helpers/Services/InputSimulator/Native/KEYBDINPUT.cs
VanillaRAT-master/VanillaStub/Helpers/Services/InputSimulator/Native/KeyboardFlag.cs
VanillaRAT-master/VanillaStub/Helpers/Services/InputSimulator/Native/MOUSEINPUT.cs
VanillaRAT-master/VanillaStub/Helpers/Services/InputSimulator/Native/MOUSEKEYBDHARDWAREINPUT.cs
VanillaRAT-master/VanillaStub/Helpers/Services/InputSimulator/Native/MouseFlag.cs
VanillaRAT-master/VanillaStub/Helpers/Services/InputSimulator/Native/NativeMethods.cs
VanillaRAT-master/VanillaStub/Helpers/Services/InputSimulator/Native/VirtualKeyCode.cs
VanillaRAT-master/VanillaStub/Helpers/Services/InputSimulator/Native/XButton.cs
VanillaRAT-master/VanillaStub/Helpers/Services/InputSimulator/WindowsInputDeviceStateAdaptor.cs
.js
VanillaRAT-master/VanillaStub/Helpers/Services/InputSimulator/WindowsInputMessageDispatcher.cs
.js
VanillaRAT-master/VanillaStub/Helpers/Services/Keylogger.cs
VanillaRAT-master/VanillaStub/Helpers/Services/StreamClasses.cs
VanillaRAT-master/VanillaStub/Helpers/Services/StreamLibrary/Enums.cs
VanillaRAT-master/VanillaStub/Helpers/Services/StreamLibrary/IUnsafeCodec.cs
VanillaRAT-master/VanillaStub/Helpers/Services/StreamLibrary/IVideoCodec.cs
VanillaRAT-master/VanillaStub/Helpers/Services/StreamLibrary/UnsafeCodecs/UnsafeStreamCodec.cs
VanillaRAT-master/VanillaStub/Helpers/Services/StreamLibrary/src/CRC32.cs
VanillaRAT-master/VanillaStub/Helpers/Services/StreamLibrary/src/ExtensionAttribute.cs
VanillaRAT-master/VanillaStub/Helpers/Services/StreamLibrary/src/Extensions.cs
VanillaRAT-master/VanillaStub/Helpers/Services/StreamLibrary/src/FastBitmap.cs
VanillaRAT-master/VanillaStub/Helpers/Services/StreamLibrary/src/JpgCompression.cs
VanillaRAT-master/VanillaStub/Helpers/Services/StreamLibrary/src/LzwCompression.cs
VanillaRAT-master/VanillaStub/Helpers/Services/StreamLibrary/src/MurmurHash2Unsafe.cs
VanillaRAT-master/VanillaStub/Helpers/Services/StreamLibrary/src/NativeMethods.cs
VanillaRAT-master/VanillaStub/Helpers/Services/StreamLibrary/src/PayloadWriter.cs
VanillaRAT-master/VanillaStub/Helpers/Services/StreamLibrary/src/PointerHelper.cs
VanillaRAT-master/VanillaStub/Helpers/Services/StreamLibrary/src/SafeQuickLZ.cs
VanillaRAT-master/VanillaStub/Helpers/Services/StreamLibrary/src/SimpleBitmap.cs
VanillaRAT-master/VanillaStub/Program.cs
VanillaRAT-master/VanillaStub/Properties/AssemblyInfo.cs
VanillaRAT-master/VanillaStub/Properties/Resources.Designer.cs
.vbs
VanillaRAT-master/VanillaStub/Properties/Resources.resx
.vbs
VanillaRAT-master/VanillaStub/Properties/Settings.Designer.cs
VanillaRAT-master/VanillaStub/Properties/Settings.settings
VanillaRAT-master/VanillaStub/VanillaStub.csproj
VanillaRAT-master/VanillaStub/VanillaStub.csproj.DotSettings
VanillaRAT-master/VanillaStub/VanillaStub.csproj.user
VanillaRAT-master/VanillaStub/alert-logo-png-2.png
.png
VanillaRAT-master/VanillaStub/bin/Debug/VanillaStub.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\dhuin\Desktop\Projects\C#\VanillaRat\VanillaStub\obj\Debug\VanillaStub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VanillaRAT-master/VanillaStub/bin/Debug/VanillaStub.exe.config
.xml
VanillaRAT-master/VanillaStub/bin/Debug/VanillaStub.pdb
VanillaRAT-master/VanillaStub/obj/Debug/DesignTimeResolveAssemblyReferences.cache
VanillaRAT-master/VanillaStub/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
VanillaRAT-master/VanillaStub/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VanillaRAT-master/VanillaStub/obj/Debug/VanillaStub.Forms.Chat.resources
VanillaRAT-master/VanillaStub/obj/Debug/VanillaStub.Forms.InitialForm.resources
VanillaRAT-master/VanillaStub/obj/Debug/VanillaStub.Forms.ScreenLock.resources
VanillaRAT-master/VanillaStub/obj/Debug/VanillaStub.Properties.Resources.resources
VanillaRAT-master/VanillaStub/obj/Debug/VanillaStub.csproj.CoreCompileInputs.cache
VanillaRAT-master/VanillaStub/obj/Debug/VanillaStub.csproj.FileListAbsolute.txt
VanillaRAT-master/VanillaStub/obj/Debug/VanillaStub.csproj.GenerateResource.cache
VanillaRAT-master/VanillaStub/obj/Debug/VanillaStub.csprojAssemblyReference.cache
VanillaRAT-master/VanillaStub/obj/Debug/VanillaStub.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\dhuin\Desktop\Projects\C#\VanillaRat\VanillaStub\obj\Debug\VanillaStub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VanillaRAT-master/VanillaStub/obj/Debug/VanillaStub.pdb
VanillaRAT-master/packages/Costura.Fody.3.3.2/.signature.p7s
VanillaRAT-master/packages/Costura.Fody.3.3.2/Costura.Fody.3.3.2.nupkg
.nupkg
VanillaRAT-master/packages/Costura.Fody.3.3.2/build/Costura.Fody.props
VanillaRAT-master/packages/Costura.Fody.3.3.2/lib/net40/Costura.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\costura\Costura\obj\Release\net40\Costura.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VanillaRAT-master/packages/Costura.Fody.3.3.2/lib/net40/Costura.xml
.xml
VanillaRAT-master/packages/Costura.Fody.3.3.2/netclassicweaver/Costura.Fody.dll
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\costura\Costura.Fody\obj\Release\net46\Costura.Fody.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VanillaRAT-master/packages/Costura.Fody.3.3.2/netclassicweaver/Costura.Fody.pdb
VanillaRAT-master/packages/Costura.Fody.3.3.2/netclassicweaver/Costura.Fody.xcf
VanillaRAT-master/packages/Costura.Fody.3.3.2/netstandardweaver/Costura.Fody.dll
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\costura\Costura.Fody\obj\Release\netstandard2.0\Costura.Fody.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VanillaRAT-master/packages/Costura.Fody.3.3.2/netstandardweaver/Costura.Fody.pdb
VanillaRAT-master/packages/Costura.Fody.3.3.2/netstandardweaver/Costura.Fody.xcf
VanillaRAT-master/packages/Fody.3.3.5/.signature.p7s
VanillaRAT-master/packages/Fody.3.3.5/Fody.3.3.5.nupkg
.nupkg
VanillaRAT-master/packages/Fody.3.3.5/build/Fody.targets
VanillaRAT-master/packages/Fody.3.3.5/netclassictask/Fody.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Fody.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VanillaRAT-master/packages/Fody.3.3.5/netclassictask/FodyCommon.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

FodyCommon.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VanillaRAT-master/packages/Fody.3.3.5/netclassictask/FodyHelpers.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

FodyHelpers.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VanillaRAT-master/packages/Fody.3.3.5/netclassictask/FodyIsolated.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

FodyIsolated.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VanillaRAT-master/packages/Fody.3.3.5/netclassictask/Mono.Cecil.Mdb.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\cecil\symbols\mdb\obj\net_4_0_Release\Mono.Cecil.Mdb.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VanillaRAT-master/packages/Fody.3.3.5/netclassictask/Mono.Cecil.Mdb.pdb
VanillaRAT-master/packages/Fody.3.3.5/netclassictask/Mono.Cecil.Pdb.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\cecil\symbols\pdb\obj\net_4_0_Release\Mono.Cecil.Pdb.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VanillaRAT-master/packages/Fody.3.3.5/netclassictask/Mono.Cecil.Pdb.pdb
VanillaRAT-master/packages/Fody.3.3.5/netclassictask/Mono.Cecil.Rocks.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\cecil\rocks\obj\net_4_0_Release\Mono.Cecil.Rocks.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VanillaRAT-master/packages/Fody.3.3.5/netclassictask/Mono.Cecil.Rocks.pdb
VanillaRAT-master/packages/Fody.3.3.5/netclassictask/Mono.Cecil.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\cecil\obj\net_4_0_Release\Mono.Cecil.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 329KB - Virtual size: 328KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VanillaRAT-master/packages/Fody.3.3.5/netclassictask/Mono.Cecil.pdb
VanillaRAT-master/packages/Fody.3.3.5/netstandardtask/Fody.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Fody.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VanillaRAT-master/packages/Fody.3.3.5/netstandardtask/FodyCommon.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

FodyCommon.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VanillaRAT-master/packages/Fody.3.3.5/netstandardtask/FodyHelpers.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

FodyHelpers.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VanillaRAT-master/packages/Fody.3.3.5/netstandardtask/FodyIsolated.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

FodyIsolated.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VanillaRAT-master/packages/Fody.3.3.5/netstandardtask/Mono.Cecil.Mdb.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\cecil\symbols\mdb\obj\netstandard_Release\netstandard1.3\Mono.Cecil.Mdb.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VanillaRAT-master/packages/Fody.3.3.5/netstandardtask/Mono.Cecil.Mdb.pdb
VanillaRAT-master/packages/Fody.3.3.5/netstandardtask/Mono.Cecil.Pdb.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\cecil\symbols\pdb\obj\netstandard_Release\netstandard1.3\Mono.Cecil.Pdb.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VanillaRAT-master/packages/Fody.3.3.5/netstandardtask/Mono.Cecil.Pdb.pdb
VanillaRAT-master/packages/Fody.3.3.5/netstandardtask/Mono.Cecil.Rocks.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\cecil\rocks\obj\netstandard_Release\netstandard1.3\Mono.Cecil.Rocks.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VanillaRAT-master/packages/Fody.3.3.5/netstandardtask/Mono.Cecil.Rocks.pdb
VanillaRAT-master/packages/Fody.3.3.5/netstandardtask/Mono.Cecil.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\cecil\obj\netstandard_Release\netstandard1.3\Mono.Cecil.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 326KB - Virtual size: 325KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VanillaRAT-master/packages/Fody.3.3.5/netstandardtask/Mono.Cecil.pdb
VanillaRAT-master/packages/dnlib.3.1.0/.signature.p7s
VanillaRAT-master/packages/dnlib.3.1.0/LICENSE.txt
VanillaRAT-master/packages/dnlib.3.1.0/dnlib.3.1.0.nupkg
.nupkg
VanillaRAT-master/packages/dnlib.3.1.0/lib/net35/dnlib.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\dnlib\src\obj\Release\net35\dnlib.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VanillaRAT-master/packages/dnlib.3.1.0/lib/net35/dnlib.pdb
VanillaRAT-master/packages/dnlib.3.1.0/lib/net35/dnlib.xml
.xml
VanillaRAT-master/packages/dnlib.3.1.0/lib/net461/dnlib.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\dnlib\src\obj\Release\net461\dnlib.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VanillaRAT-master/packages/dnlib.3.1.0/lib/net461/dnlib.pdb
VanillaRAT-master/packages/dnlib.3.1.0/lib/net461/dnlib.xml
.xml
VanillaRAT-master/packages/dnlib.3.1.0/lib/netcoreapp2.1/dnlib.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\dnlib\src\obj\Release\netcoreapp2.1\dnlib.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VanillaRAT-master/packages/dnlib.3.1.0/lib/netcoreapp2.1/dnlib.pdb
VanillaRAT-master/packages/dnlib.3.1.0/lib/netcoreapp2.1/dnlib.xml
.xml
VanillaRAT-master/packages/dnlib.3.1.0/lib/netstandard2.0/dnlib.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\dnlib\src\obj\Release\netstandard2.0\dnlib.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VanillaRAT-master/packages/dnlib.3.1.0/lib/netstandard2.0/dnlib.pdb
VanillaRAT-master/packages/dnlib.3.1.0/lib/netstandard2.0/dnlib.xml
.xml

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 66KB - Virtual size: 65KB

.rsrc Size: 1024B - Virtual size: 808B

.reloc Size: 512B - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 980KB - Virtual size: 979KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 112KB - Virtual size: 111KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 980KB - Virtual size: 979KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 112KB - Virtual size: 111KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 7KB - Virtual size: 6KB

.reloc Size: 512B - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 980KB - Virtual size: 979KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

.text
Size: 66KB - Virtual size: 65KB

.rsrc
Size: 1024B - Virtual size: 808B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 980KB - Virtual size: 979KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 112KB - Virtual size: 111KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 980KB - Virtual size: 979KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 112KB - Virtual size: 111KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 7KB - Virtual size: 6KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 980KB - Virtual size: 979KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 112KB - Virtual size: 111KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 2KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 112KB - Virtual size: 111KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 992B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 65KB - Virtual size: 64KB

.rsrc
Size: 1024B - Virtual size: 836B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 65KB - Virtual size: 64KB

.rsrc
Size: 1024B - Virtual size: 836B

.reloc
Size: 512B - Virtual size: 12B