Static task
static1
Behavioral task
behavioral1
Sample
tt-view-bot_v1.13_02/start.bat
Resource
win10v2004-20230220-en
General
-
Target
tt-view-bot_v1.13_02.zip
-
Size
8.7MB
-
MD5
58758ffd8536f637070ab8a65bcaf58f
-
SHA1
d58b308e3312b249f7262f5a199b127c33a16580
-
SHA256
e2a855b132beb3bffaf67c62983ebcabfc259c480b84c603bb283cd651875438
-
SHA512
5e205bd2d3bdde8cdd95493de4ee34075ffbff7af6ce511f69cdaaad6437d9307a1a45c85307fb799c46953eea069e21deb1f56fc1834d162258d5888dc3292a
-
SSDEEP
196608:wCuJ3cvFQ0L9PcljzcDS5qIQ/CBmwWIiT+OpDys8:a3r9cDSHBmjIi/Y
Malware Config
Signatures
Files
-
tt-view-bot_v1.13_02.zip.zip
-
tt-view-bot_v1.13_02/README BEFORE RUN.txt
-
tt-view-bot_v1.13_02/dependencies/Bunifu_UI_v1.52.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 216KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
tt-view-bot_v1.13_02/dependencies/FastColoredTextBox.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 322KB - Virtual size: 322KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
tt-view-bot_v1.13_02/proxies.txt
-
tt-view-bot_v1.13_02/results.png.png
-
tt-view-bot_v1.13_02/start.bat