C:\Users\Darrian\Desktop\Shit\bot builder\VB Rat1\obj\x86\Release\xDDoSeR Bot Builder.pdb
Static task
static1
Behavioral task
behavioral1
Sample
9f78f6587bd84a38d966f33e49e785ee6b347076572975515a9a92eef167e025.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
9f78f6587bd84a38d966f33e49e785ee6b347076572975515a9a92eef167e025.exe
Resource
win10v2004-20240802-en
General
-
Target
9f78f6587bd84a38d966f33e49e785ee6b347076572975515a9a92eef167e025
-
Size
942KB
-
MD5
d84953a514fbb286ea4557fc3cc89d1e
-
SHA1
94b3371e03d6efee6750f8c407f98386f1367e60
-
SHA256
9f78f6587bd84a38d966f33e49e785ee6b347076572975515a9a92eef167e025
-
SHA512
b46f09376d79238ce6bf96b75324ee718c04dfe54dc3b54e4b10bb8f6e2ae8541f4e7554970a087a4c8c2ac6f0c856771f823d04d79f7dae3309560195047be5
-
SSDEEP
6144:wT6iu6uUaDgiLRmTa03amRQqVkkcVbf8h2QQQQQQQQnezO1xwtdU7RkpQLl6PF/G:wCyiHsDH6eK1yPi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9f78f6587bd84a38d966f33e49e785ee6b347076572975515a9a92eef167e025
Files
-
9f78f6587bd84a38d966f33e49e785ee6b347076572975515a9a92eef167e025.exe .vbs windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 574KB - Virtual size: 573KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdata Size: 512B - Virtual size: 142B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 366KB - Virtual size: 365KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ