C:\Users\Administrator\Desktop\powershell\obj\Release\TiktokViewsBot.pdb
Static task
static1
Behavioral task
behavioral1
Sample
TiktokDevX016.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
TiktokDevX016.exe
Resource
win10v2004-20240426-en
General
-
Target
TiktokDevX016.exe
-
Size
567KB
-
MD5
ae18881db2856045cf184135dae7b4ab
-
SHA1
91355bc97116d845dfdedd9284cebe26f2938576
-
SHA256
c57abbd489ef5ea456efc1e42eb6fd74c96bf35b35fa0abfe49061572d025b86
-
SHA512
abe0c2ea01318ec4ca618140cdea81d9b8bce04f542298affc11f0e5f8a042dfd8423a1727f51dadd2e1bf972d51db120bc1c49b9e5856c03a891d0353ee4364
-
SSDEEP
12288:FM5bu9l+mGFTX/ZI180+VQ9M5F/egNAujwYHB/VOv1xjL4BsbOo8dfcGepiMPOF:FM5bZFNVQEWmAucmW1iBsjVptWF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource TiktokDevX016.exe
Files
-
TiktokDevX016.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 500KB - Virtual size: 500KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ