venybot v1[.]31[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

venybot v1.31.exe
Size

84KB
MD5

63830fedfb61fa5a4a751d34dc1edd6f
SHA1

9dcfcdedf554716c1526d8264eb7790c2661ade3
SHA256

800a17ccd1ee529a312b19962b71d8f45a9f0387963df0a911c06191721c2a03
SHA512

7488b7d6ef7eb14273e1411d6a80531da9df45430a8b6a98a971b460f6d2b02d04682dc9611ff3ce9c0fde765a405fd89e7a7df8c81c64807323b00b356791fb
SSDEEP

1536:h1XTGOvNXxNyFuv6tg7Jdxwx6bPftJiKdNyFuv6tg7Jdxwx6bPftJiK/SED:rXyOvNXxIovhJdx2WPfvZdIovhJdx2WB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
venybot v1.31.exe

Files

venybot v1.31.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Veni_._\source\repos\WindowsFormsApp2\WindowsFormsApp2\obj\x64\Release\WindowsFormsApp2.pdb

Sections

.text
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ