Static task
static1
Behavioral task
behavioral1
Sample
Twitch Follow Botter by MadfutPlays.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
Twitch Follow Botter by MadfutPlays.exe
Resource
win10v2004-20240226-en
General
-
Target
Twitch Follow Botter by MadfutPlays.exe
-
Size
21KB
-
MD5
f28d1947fcf743092015f414572e0a76
-
SHA1
b92b9229b6bb7a1724470b79bcd433d279b438d1
-
SHA256
9a3ac05cb17c8829e10241fd6863bd36c1b34abc5cf9f9278f1bbf8076927c73
-
SHA512
ef0610258a8889c4b4018371dd2a4c25e2046cfc4d080d4090b7c735cb98850d858eebbcf001e3bfce6e7c06cf569acc4352cae1e31287fec70b47c33bd2b7b1
-
SSDEEP
384:gmeJn1tmYPOxZ3WxNvpV04ILAnqvi9HB3R/6+9Al6Sc8gIkvwKwq6urV:UmxRoZE482BM+uwSc8gH
Malware Config
Signatures
Files
-
Twitch Follow Botter by MadfutPlays.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
3d:1e:41:93:da:cc:5f:80:46:8a:96:35:7a:2b:c6:cbCertificate
IssuerCN=DESKTOP-20393\\chrisNot Before03/02/2023, 14:52Not After03/02/2024, 20:52SubjectCN=DESKTOP-20393\\chrisf1:d6:f3:4b:84:9c:1a:32:13:64:dc:95:bd:2c:af:e0:f6:72:b8:8d:05:e2:b2:44:db:73:51:fc:f8:5a:c2:56Signer
Actual PE Digestf1:d6:f3:4b:84:9c:1a:32:13:64:dc:95:bd:2c:af:e0:f6:72:b8:8d:05:e2:b2:44:db:73:51:fc:f8:5a:c2:56Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\chris\source\repos\Twitch Follow Botter by MadfutPlays\Twitch Follow Botter by MadfutPlays\obj\Debug\Twitch Follow Botter by MadfutPlays.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ