Boost Bot Build[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Boost Bot Build.zip
Size

31.8MB
MD5

3e9c71cdaf2b7cf31db5e07d238d2ff3
SHA1

e446103fdf32e6727957dc76efda77790932426d
SHA256

548bb1e7bea1c77ba6229d4ddae95265ea405a4807671617493ffde861be5fe1
SHA512

27735f423e14b155a319bf12a762bf8ac8d1d7a541c063ffb0186524c82c4778bb9702ff8e8e1ea18d77e2043e3cd548ec978586275049e9f5939e2fa2df457d
SSDEEP

786432:zWfG3cWcNhJq9PdFzHSzlEkp4ACbTl8S4SVgWdF0:0G5Uq9P3M7Wjbh8qCWdF0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Boost Bot Build/BoostBot.exe

Files

Boost Bot Build.zip
.zip
Boost Bot Build/BoostBot.exe
.exe windows:0 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

PDB Paths

;::::; ;::::; :; ;:::::' :; ;:::::; ;. ,:::::' ; OOO\ ::::::; ; OOOOO\ ;:::::; ; OOOOOOOO ,;::::::; ;'

Sections

EinTim
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

EinTim
Size: 58KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29.8MB - Virtual size: 29.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Boost Bot Build/assets/avatars/boostup_logo.png
.png
Boost Bot Build/assets/banners/boostup_logo_wide.png
.png
Boost Bot Build/config.yml
Boost Bot Build/database/online-tokens.json
Boost Bot Build/run.bat
Boost Bot Build/whitelisted.json