Static task
static1
Behavioral task
behavioral1
Sample
BotFarmer.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
BotFarmer.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
THB-BotFarmerDofus2.0-V1.3.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
THB-BotFarmerDofus2.0-V1.3.exe
Resource
win10v2004-20231215-en
General
-
Target
7c66c72031ce38fceb052e648e9b28b5
-
Size
741KB
-
MD5
7c66c72031ce38fceb052e648e9b28b5
-
SHA1
05b48e97c57bb17784828d312fe746e0c5b27e33
-
SHA256
18ff52081bded013e581d9ba2bffcc7f457ca5a511a420747bdcef75982f7b60
-
SHA512
b2ec3268a9c7884e25339c94b1b124a16fba5ed7e95ebeff8b8436000b5d0e3d1fcfa04f3568d49a816bdca58a581321b8addbb742bc5df4362bf3555079a182
-
SSDEEP
12288:M4p2ZT+CCN+neZrN/X2HIQmDYPi9KEbrE5nfeYGD1/4B3W1CWrnUrZVu:wKCCN+eZZ/GHI9tfynfeYGfxzQu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/THB-BotFarmerDofus2.0-V1.3.exe
Files
-
7c66c72031ce38fceb052e648e9b28b5.zip
-
BotFarmer.dll
-
Itinraire.dat
-
THB-BotFarmerDofus2.0-V1.3.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: - Virtual size: 568KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 141KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE