Static task
static1
Behavioral task
behavioral1
Sample
botkill.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
botkill.exe
Resource
win10v2004-20230220-en
General
-
Target
botkill.exe
-
Size
890B
-
MD5
c878fca0ed830d82969e13a68d7ac1fb
-
SHA1
76d4a2fe4cf9dd69e7304f628e6884acfebfc0de
-
SHA256
caea0e58391a29585f7cbc42660de0b0ac366122040963cc12bb3af8bf28e889
-
SHA512
01f0691fb0f230bdf6db23b26e0b7c18f829a09a10197c0c37d1dc3be73c23b48aee6bf0b0a22a4866c6d8d312e70388c8ca4cfcbab3f0ea4657d4c352c6a2c1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource botkill.exe
Files
-
botkill.exe.exe windows x86
6b12f62e3be252f0040aebba7e1ef64b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
ExitProcess
user32
MessageBoxA
msvcrt
printf
Sections
.data Size: 378B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE