Guns[.]lol viewbot[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
Guns.lol viewbot.zip
Size 73.2MB
Sample260728-wsjsbssapd
SHA256 1bfd71376c6b02fcf3a153733c2fa300cfc7c42cf0d0765c3ae259d1ea577ff1
MD5 918146229b875c55fcee1b60d427e409
SHA1 8d820ff7ae709383692fbeab20bd1805bb31b442
SHA512 23a045c8969100b302e2656aaeb6d927fead1e472f5787593ffc79c7d711deb6e2efdfd083d48c5275cda58a24f9d727fc06fe33dab76f05ddf7e4b35a8267f0
SSDEEP 1572864:tatuTJW66UQI8ivqCnxaIr+1Vczjt1SvbOK4uYmcdDpEQDZpB:Atk67irhBpkvbF4u3cZpX9P
TLSH
T1A9F73376E01CEB47D38A4E6252ACD9831ADFB7F4077E66E5B04E3B1D119EEC5E10048A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Guns.lol viewbot\Guns.lol viewbot\guns.lol viewbot.exe

File Explorer

Guns.lol viewbot.zip

.zip 73.2MB
Guns.lol viewbot\Guns.lol viewbot\README.TXT

562B
Guns.lol viewbot\Guns.lol viewbot\guns.lol viewbot.exe

.exe 73.4MB

Guns.lol viewbot.zip

SHA256 1bfd71376c6b02fcf3a153733c2fa300cfc7c42cf0d0765c3ae259d1ea577ff1
MD5 918146229b875c55fcee1b60d427e409
SHA1 8d820ff7ae709383692fbeab20bd1805bb31b442
SHA512 23a045c8969100b302e2656aaeb6d927fead1e472f5787593ffc79c7d711deb6e2efdfd083d48c5275cda58a24f9d727fc06fe33dab76f05ddf7e4b35a8267f0
SSDEEP 1572864:tatuTJW66UQI8ivqCnxaIr+1Vczjt1SvbOK4uYmcdDpEQDZpB:Atk67irhBpkvbF4u3cZpX9P
TLSH
T1A9F73376E01CEB47D38A4E6252ACD9831ADFB7F4077E66E5B04E3B1D119EEC5E10048A
MD5 SHA1 SHA512 SSDEEP TLSH

Guns.lol viewbot\Guns.lol viewbot\guns.lol viewbot.exe

IMPHASH a9c887a4f18a3fede2cc29ceea138ed3
SHA256 caa5ffb3d7aa963a0ce0d566cd912269e97031c50d16f042585489b7b4d8787d
MD5 7b8e6deb4add06df0ed937cefa9abebb
SHA1 a89cf2c8a849da62f7c7ffed2f8f86a082784be9
SHA512 c88e3c047923969fe760bc93d7aa090ecf02bbcb14da1d5c3a3cc647613030c7d0b0506d186b96dae20ffdf2976c7a74a8df268a6d0cee98a50d63e39b65a62e
SSDEEP 1572864:AcJmfzAIueAS0q9CQ3JQwXE1PCF5/Xu/j0OWkMmQbxNhogy:hJmutExHv1+/j3WkHQVNag
TLSH
T1A3F73376B098AB46F7470D914A67AD430E8BDFE753AD066293CABC2C5C1FE55EE0008D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5293

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Guns.lol viewbot.zip

Guns.lol viewbot\Guns.lol viewbot\README.TXT

Guns.lol viewbot\Guns.lol viewbot\guns.lol viewbot.exe

msvcrt

shell32

kernel32

generic