bot[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bot.exe
Size

42KB
MD5

232f90d5f13ef94d25c5f602f63649c9
SHA1

5506d9348f0fc7fdad58482da8e101a7fe32d67a
SHA256

9ee7ef5a00c692ca0618c2def95b9609423bef64031ee8fae53946e25e2f34d5
SHA512

a3f58e077ec44404e6cd9027f74e24c2d87ec35ce6aa567c6bd546e7b27359a0b05c98ba8a808bea25d0ffbf06c359ea90e65d374c3ced3908189b2d4d990f85
SSDEEP

768:P9r8vm0w2Fsd1eWBJVvz0X+8hgzuhjZd6XhkhGhDY6r1dQrLhx56ZVz9sYcpASvP:Pavxw2uJ6Xh6CBnwiAhY6r1dQrL/56Z8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bot.exe

Files

bot.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ