Static task
static1
Behavioral task
behavioral1
Sample
GameBot_1.exe
Resource
win10v2004-20230220-en
General
-
Target
GameBot_1.exe
-
Size
164KB
-
MD5
fbf231c9f14897eb4e40a5e003ac5fc2
-
SHA1
e5616743a8561c0a9ad76a01b10f131738011239
-
SHA256
dc87310a10acbeaf1cf3a8f1c9302e7263d8a6b2ab294186be530b513defb649
-
SHA512
da4f22ea7b1904e605e0dda1ae6ce63ad14532aa8fbd3e0ecff62b41d671ae04c434abd11798d7c70967103158ec7944f9c421c2b1c6488af0ea5af38deee6c6
-
SSDEEP
1536:yhxuHLgcgmKsurOInzpz17iQ+MrrXaEz2vCu4LTGoyUwwPUSO3ZmdgbS1vSKyjSx:liRscOMzggHNzuzUxJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource GameBot_1.exe
Files
-
GameBot_1.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ