Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Overview
overview
3Static
static
3Release.zip
windows7-x64
1Release.zip
windows10-2004-x64
1FNFBot20.exe
windows7-x64
1FNFBot20.exe
windows10-2004-x64
1FNFBot20.exe.config
windows7-x64
3FNFBot20.exe.config
windows10-2004-x64
3FNFDataAPI.dll
windows7-x64
1FNFDataAPI.dll
windows10-2004-x64
1Newtonsoft.Json.dll
windows7-x64
1Newtonsoft.Json.dll
windows10-2004-x64
1Newtonsoft.Json.xml
windows7-x64
1Newtonsoft.Json.xml
windows10-2004-x64
1WindowsInput.dll
windows7-x64
1WindowsInput.dll
windows10-2004-x64
1WindowsInput.xml
windows7-x64
1WindowsInput.xml
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Release.zip
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
Release.zip
Resource
win10v2004-20230621-en
Behavioral task
behavioral3
Sample
FNFBot20.exe
Resource
win7-20230621-en
Behavioral task
behavioral4
Sample
FNFBot20.exe
Resource
win10v2004-20230621-en
Behavioral task
behavioral5
Sample
FNFBot20.exe.config
Resource
win7-20230621-en
Behavioral task
behavioral6
Sample
FNFBot20.exe.config
Resource
win10v2004-20230621-en
Behavioral task
behavioral7
Sample
FNFDataAPI.dll
Resource
win7-20230621-en
Behavioral task
behavioral8
Sample
FNFDataAPI.dll
Resource
win10v2004-20230621-en
Behavioral task
behavioral9
Sample
Newtonsoft.Json.dll
Resource
win7-20230621-en
Behavioral task
behavioral10
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20230621-en
Behavioral task
behavioral11
Sample
Newtonsoft.Json.xml
Resource
win7-20230621-en
Behavioral task
behavioral12
Sample
Newtonsoft.Json.xml
Resource
win10v2004-20230621-en
Behavioral task
behavioral13
Sample
WindowsInput.dll
Resource
win7-20230621-en
Behavioral task
behavioral14
Sample
WindowsInput.dll
Resource
win10v2004-20230621-en
Behavioral task
behavioral15
Sample
WindowsInput.xml
Resource
win7-20230621-en
Behavioral task
behavioral16
Sample
WindowsInput.xml
Resource
win10v2004-20230621-en
Target
Release.zip
Size
347KB
MD5
c52984d0bedfc22612973fd20866f167
SHA1
cdb50afffdc8bf982843282a131b2925fe0d0dba
SHA256
c2c22f20a9e6b16db03d995a17327ddebc0795bbc59bc5d2e91fdc46669d03f9
SHA512
406f2bc84159705c597c9ed800b8b6a17fc21b92c3ecade7058b0df85f1950bd933d10d27c642382ff4aaa62f99ba9d0be8ace09ff54b4cf59f27221ea195c6a
SSDEEP
6144:N7hEoI56GNNT/lR9QIN+4uW3ybIqFp5mL23hfiDz17YVIKDZqmjH811dUCQRI5Mp:zy56qhlR9Qo2WmFDgQfiuNQmjGdwRI5a
Checks for missing Authenticode signature.
resource |
---|
unpack001/FNFBot20.exe |
unpack001/FNFDataAPI.dll |
unpack001/WindowsInput.dll |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ