Static task
static1
Behavioral task
behavioral1
Sample
BOTBINARY.EXE.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
BOTBINARY.EXE.exe
Resource
win10v2004-20230220-en
General
-
Target
BOTBINARY.EXE.bin
-
Size
76KB
-
MD5
9b9e083a9cf6a1db6251e189e5966a4d
-
SHA1
943372d44cb9b162b9c98d9b5a7241642c44bb80
-
SHA256
96ca097b0daff949826f3611116c7efc41343ad15cc76b96db1eeac3c01a3608
-
SHA512
26cc031cf24885b80abacb0d04444845f37203b22a510a5d4d5b8604cd9c3fc685be19cd1c840a091a511fb8cbe7bde2dbf5baaded7d3768f36e61d8eebb4a8a
-
SSDEEP
1536:sgEuWlEyVc/3h2PDAu3h9a1NCVDd6BVssS5Nq5:t9Wlg/R2PDAu92ssS5Nq5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource BOTBINARY.EXE.bin
Files
-
BOTBINARY.EXE.bin.exe windows x86
2a6cf69ec1f2374fb62f74cdeda1d3a6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
MoveFileA
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE