Static task
static1
Behavioral task
behavioral1
Sample
e621 ReBot v2.exe
Resource
win10v2004-20231023-en
General
-
Target
e621.ReBot.v2.2.8.10.zip
-
Size
2.4MB
-
MD5
470a53ccbccbe68f24c64b0ce7da7d84
-
SHA1
8e716d9707e00637e1a0262a0259a9f982f93111
-
SHA256
ba87bcb0e24f91b37415d02174ab115c8e6785837ed05077455a1a4d624b173c
-
SHA512
949a5160a5eddf156a81a4863828e723bf6cf9e26e3c16f257e6b370c9f1e229d01d024bd5689317de49bfbad6f4eedb0aeeb0df869e888b30611a164517ce90
-
SSDEEP
49152:PinFjgJrg2sXeoTtY0eg3DzUYEPFwLeY2ap1SMphFlciokBT6icLrmyHbJMacVAf:PyyJrCeM9QxPF2RiqD+DM6bPmamaxtvN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/e621 ReBot v2.exe
Files
-
e621.ReBot.v2.2.8.10.zip.zip
-
e621 ReBot v2.exe.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
e621 ReBot v2.exe.config.xml
-
e621 ReBot v2.pdb