C:\Users\XCoder\Desktop\BotKiller VB.NET\BotKiller\obj\Debug\BotKiller.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Debug/BotKiller.exe
Resource
win11-20240426-en
General
-
Target
Debug.zip
-
Size
31KB
-
MD5
753293b835b7d2e1a1e1c7b62cc30be4
-
SHA1
705481072b4f8b98ee1122284f147647f4d1744e
-
SHA256
6218df66a1ee48c27dd8caf9e99440d070c24997ab12dfd5dfda4cabd6ea5f8d
-
SHA512
ce7759d013b773845f0c10e86f6a6d824250097a160495a81fca53a9360555c98464eda62d13d8aff327f05a7eb33f053c21040ce0c381b004339ca91316fab7
-
SSDEEP
768:NSLchgaHtFOJnhTnjOXqH67uDbCgByi0cJ7L8Ls/T:Ich/NFOJhDjitQf7Lp/T
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Debug/BotKiller.exe unpack001/Debug/MutexHash.exe
Files
-
Debug.zip.zip
-
Debug/BotKiller.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Debug/BotKiller.exe.config
-
Debug/BotKiller.pdb
-
Debug/BotKiller.xml
-
Debug/MutexHash.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\XCoder\Desktop\BotKiller VB.NET\MutexHash\obj\Debug\MutexHash.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Debug/MutexHash.exe.config.xml
-
Debug/MutexHash.pdb
-
Debug/MutexHash.xml