Overview

overview

3

Static

static

3

Other/crypt.cmd

windows7-x64

1

Other/crypt.cmd

windows10-2004-x64

1

Other/xor.exe

windows7-x64

1

Other/xor.exe

windows10-2004-x64

1

build.cmd

windows7-x64

1

build.cmd

windows10-2004-x64

1

cpp/imbot.vbs

windows7-x64

1

cpp/imbot.vbs

windows10-2004-x64

1

cpp/mods.vbs

windows7-x64

1

cpp/mods.vbs

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    IMbotMod_V4.1.zip

  • Size

    78KB

  • MD5

    9d7f2f4c776062f7eb1300142bb44f6b

  • SHA1

    ec4f5b5264c6785c538ef347f8b2a77da9a15952

  • SHA256

    5a20e04136554ce266c226e3ffda53265e7c876b049258a63b764769e582856d

  • SHA512

    ebf4613a32be2720cc56f0be57657d3a68cca09afd7915ab99e04221a6113ec213876f7f2372f90baad3337631ad57db50cdabc7450b1bb3a072ee77236ba132

  • SSDEEP

    1536:jBkPrLdD45G3Jemu3O/Q/d20/QpUy1oLs+dVML6ZNpXRW6rFmJw7hZizklcKhIWN:eP3dD4CefwQT/QpP1es6X8pImKEsLn

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • IMbotMod_V4.1.zip
    .zip

    Password: infected

  • Other/MSNMessengerAPI.tlb
  • Other/crypt.cmd
  • Other/str.cfg
  • Other/xor.exe
    .exe windows x86

    Password: infected

    2cce3f96f132b763f87cbf19e39a5455


    Headers

    Imports

    Sections

  • build.cmd
  • cmd.h
  • configs.h
  • cpp/StdAfx.cpp
  • cpp/StdAfx.h
  • cpp/blist.cpp
  • cpp/commands.cpp
  • cpp/imbot.cpp
    .vbs
  • cpp/irc.cpp
  • cpp/loaddlls.cpp
  • cpp/mods.cpp
    .vbs
  • cpp/protocol.cpp
  • cpp/threads.cpp
  • h/blist.h
  • h/commands.h
  • h/defines.h
  • h/externs.h
  • h/functions.h
  • h/imbot.h
  • h/includes.h
  • h/irc.h
  • h/loaddlls.h
  • h/mods.h
  • h/protocol.h
  • h/threads.h
  • h/zipit.h
  • imbot.dsp
  • imbot.dsw