BotKiller[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BotKiller.exe
Size

6KB
MD5

32c6409f6abb2c28391e421a37a7f9f1
SHA1

e1e20d77ad1c2d160e2813a130cffd2d895de734
SHA256

79403ee613d70eb36cd46dbb1d32e60b18bec1e142f10b7196b4a36bc4f947c8
SHA512

2da35650f7baaa4ce867d229b259cbcdf8bebfb9ff7d194fba7b7252ae25de4ca54685416c1b404cec8b25be11349494287388583313c5ecbc2742dd2b8ab514
SSDEEP

96:rHwv51otl3q1PGKOF4+FloP905/FLI2gW9wzNt:pX6qF4wauZRI2gIS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BotKiller.exe

Files

BotKiller.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Mes\Downloads\Bot-Killer-master\Bot-Killer-master\BotKiller\BotKiller\obj\Release\BotKiller.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ