Guns.lol viewbot.zip
- SHA256 1bfd71376c6b02fcf3a153733c2fa300cfc7c42cf0d0765c3ae259d1ea577ff1
Static task
static1
1 signatures
General
- Target Guns.lol viewbot.zip
- Size 73.2MB
- Sample260728-xbr8tashpg
- SHA256 1bfd71376c6b02fcf3a153733c2fa300cfc7c42cf0d0765c3ae259d1ea577ff1
- MD5 918146229b875c55fcee1b60d427e409
- SHA1 8d820ff7ae709383692fbeab20bd1805bb31b442
- SHA512 23a045c8969100b302e2656aaeb6d927fead1e472f5787593ffc79c7d711deb6e2efdfd083d48c5275cda58a24f9d727fc06fe33dab76f05ddf7e4b35a8267f0
- SSDEEP 1572864:tatuTJW66UQI8ivqCnxaIr+1Vczjt1SvbOK4uYmcdDpEQDZpB:Atk67irhBpkvbF4u3cZpX9P
- TLSH T1A9F73376E01CEB47D38A4E6252ACD9831ADFB7F4077E66E5B04E3B1D119EEC5E10048A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Guns.lol viewbot\Guns.lol viewbot\guns.lol viewbot.exe
File Explorer
-
Guns.lol viewbot.zip.zip 73.2MB
-
Guns.lol viewbot\Guns.lol viewbot\README.TXT562B
-
Guns.lol viewbot\Guns.lol viewbot\guns.lol viewbot.exe.exe 73.4MB
Guns.lol viewbot\Guns.lol viewbot\README.TXT
- SHA256 c39c8a424286a8ccb8aaf8e8006ce26eb9d5a153360c17e64d022e338e7cb612
- MD5 a70367169ff8be3aaaf6477e264f4a1d
- SHA1 10374a7cc1dfc709523a9529449c3c91751e1f21
- SHA512 7425caa6dad3aa84ecaa8d74385da1f3c682814764ae73944edd2c18c12762b14c11160f2ac33b4f696f690329abcfac2d8a934795721a958d0a3dc85a96570e
- TLSH T1D5F0208B79C02BAB72E615B3F0811616C360A20E125454708C96E0CE087EF6500FD7DB
- MD5 SHA1 SHA512 TLSH
Guns.lol viewbot\Guns.lol viewbot\guns.lol viewbot.exe
- IMPHASH a9c887a4f18a3fede2cc29ceea138ed3
- SHA256 caa5ffb3d7aa963a0ce0d566cd912269e97031c50d16f042585489b7b4d8787d
- MD5 7b8e6deb4add06df0ed937cefa9abebb
- SHA1 a89cf2c8a849da62f7c7ffed2f8f86a082784be9
- SHA512 c88e3c047923969fe760bc93d7aa090ecf02bbcb14da1d5c3a3cc647613030c7d0b0506d186b96dae20ffdf2976c7a74a8df268a6d0cee98a50d63e39b65a62e
- SSDEEP 1572864:AcJmfzAIueAS0q9CQ3JQwXE1PCF5/Xu/j0OWkMmQbxNhogy:hJmutExHv1+/j3WkHQVNag
- TLSH T1A3F73376B098AB46F7470D914A67AD430E8BDFE753AD066293CABC2C5C1FE55EE0008D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5293
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
msvcrt
malloc
memset
strcmp
strcpy
getenv
sprintf
fopen
fwrite
fclose
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
exit
shell32
ShellExecuteA
kernel32
SetUnhandledExceptionFilter
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
73.4MB
Virtual Size
73.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
768B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ