RedditVideoMakerBot_x64.7z
- SHA256 505e10748fb14a8fde5174d019c6dcaa9325f3f55d9f3b355626747b1bd11a60
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RedditVideoMakerBot_x64.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
RedditVideoMakerBot_x64.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
22 signatures
150 seconds
General
- Target RedditVideoMakerBot_x64.7z
- Size 89.0MB
- Sample260809-wftrrsbf85
- SHA256 505e10748fb14a8fde5174d019c6dcaa9325f3f55d9f3b355626747b1bd11a60
- MD5 98ffc4d0bed8f5bca914e12f07e8c55b
- SHA1 22169b2c7d468f02860faddd72d06591a619e208
- SHA512 60114b82a580237660e66d690f02be91cba208fec555ebb6ad3df31534893feeea3c0fe2930fbd8115b0e755c53196816422459198a8808e2233457be43f3752
- SSDEEP 1572864:X9L+9GkMmhvK7zC+WMFgVfD0avSlJ6gR5EIcgvPiHtjwirDxgo5bZhndQcTT:NGDhKzCH0gVfpKHlEIcwPEtsAgC3dTT
- TLSH T1411833DCF2CD06F2E457153ACAD1B968D7DC30299FF78410A896E6F5B0AE2D46122BD0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/RedditVideoMakerBot_x64.exe
File Explorer
-
RedditVideoMakerBot_x64.7z.7z 89.0MB
-
RedditVideoMakerBot_x64.exe.exe 131.8MB
-
docs/specs/spec-template.md1KB
RedditVideoMakerBot_x64.exe
- IMPHASH c6e531c522f0086add87d907c5623e8b
- SHA256 708e4c73217d10e821899bfb5296b72328520407f4cc38c4a525707568efa57d
- MD5 33ec2af5e91cd5c71a3283d131aacb80
- SHA1 a50ddbb0298800c408089f8f77c0f75b74ac0929
- SHA512 3c1f21c123921d5d09aec763d7ff16bc94fadcaa6c590d679c26050e68de5e0e6c457d020493b666f05bc775ee508fdb2fdf5f51bcda33291d4612b77b531ce3
- SSDEEP 1572864:7IQEyOLAs7B9ktxBpoYRS4XSJB4Gn0fXt8wrWhNExO5pSs97ORCaPX7qUecFVbuV:8yc3UxBiGS4XOl0fXtcPd5pJ9FLUFRu
- TLSH T10468AF889D4A2F5BC89DEAF12E4D852520601D709D73F268F9110984EF7FF39E6187AC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
6117792
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
SetupAppx.pdb
kernel32
GetConsoleMode
GetStdHandle
LoadLibraryA
GetTempPathW
GetProcessHeap
HeapFree
HeapAlloc
GetModuleHandleW
Sleep
GetModuleHandleA
SetHandleInformation
WriteFileEx
GetFileInformationByHandle
ReadFileEx
CancelIo
GetOverlappedResult
FormatMessageW
LoadLibraryExA
ReadFile
DeleteFileW
SetFileInformationByHandle
GetFileInformationByHandleEx
GetConsoleWindow
GetSystemDirectoryW
GetWindowsDirectoryW
GetFileAttributesW
FreeConsole
SetFilePointerEx
SetLastError
GetSystemInfo
CloseHandle
GetModuleFileNameW
GetPhysicallyInstalledSystemMemory
CreateFileW
GetTickCount64
FindNextFileW
PostQueuedCompletionStatus
LoadLibraryExW
HeapReAlloc
SetFileCompletionNotificationModes
GlobalSize
CreateIoCompletionPort
GetQueuedCompletionStatusEx
GetFinalPathNameByHandleW
FlushFileBuffers
HeapSize
GetLastError
FindClose
UnmapViewOfFile
VirtualProtect
DuplicateHandle
MapViewOfFile
CreateFileMappingW
GlobalAlloc
GlobalFree
GlobalUnlock
GlobalLock
GetSystemTimePreciseAsFileTime
GetFileType
SetStdHandle
WriteFile
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleExW
WriteConsoleW
GetConsoleOutputCP
FreeLibrary
CreateDirectoryW
GetFullPathNameW
GetDiskFreeSpaceExW
FindFirstFileExW
SetThreadErrorMode
SetFileTime
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetCommandLineA
TerminateProcess
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
EncodePointer
GetACP
FlsSetValue
FlsGetValue
FlsAlloc
RaiseException
RtlPcToFileHeader
RtlUnwindEx
GetStartupInfoW
SetUnhandledExceptionFilter
InitializeSListHead
GetOEMCP
GetCPInfo
IsValidCodePage
SetEnvironmentVariableW
GetStringTypeW
CompareStringW
LCMapStringW
FlsFree
RemoveVectoredExceptionHandler
CreateEventA
GetExitCodeProcess
WaitForMultipleObjects
FreeEnvironmentStringsW
GetEnvironmentStringsW
CreateProcessW
CompareStringOrdinal
CreateEventW
ExitProcess
QueryPerformanceCounter
SleepEx
CreateThread
QueryPerformanceFrequency
GetCommandLineW
GetEnvironmentVariableW
MultiByteToWideChar
WaitForSingleObject
ReleaseMutex
CreateMutexA
GetCurrentProcessId
lstrlenW
WaitForSingleObjectEx
GetCurrentDirectoryW
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetUserPreferredUILanguages
WideCharToMultiByte
GetCurrentThread
SetThreadStackGuarantee
AddVectoredExceptionHandler
Process32Next
Process32First
CreateToolhelp32Snapshot
SwitchToThread
GetCurrentProcess
SetWaitableTimer
CreateWaitableTimerExW
GetCurrentThreadId
advapi32
RegQueryValueExW
RevertToSelf
ImpersonateAnonymousToken
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
SystemFunction036
GetTokenInformation
OpenProcessToken
oleaut32
SysStringLen
GetErrorInfo
SysFreeString
ntdll
NtWriteFile
NtReadFile
NtCreateFile
NtDeviceIoControlFile
NtCancelIoFileEx
NtOpenFile
RtlNtStatusToDosError
NtCreateNamedPipeFile
ws2_32
WSASocketW
WSASend
connect
getsockopt
shutdown
recv
setsockopt
bind
closesocket
WSAIoctl
WSAStartup
WSACleanup
getaddrinfo
getsockname
freeaddrinfo
send
getpeername
ioctlsocket
WSAGetLastError
bcrypt
BCryptGenRandom
crypt32
CertAddCertificateContextToStore
CertGetCertificateChain
CertFreeCertificateChain
CertDuplicateCertificateContext
CertDuplicateCertificateChain
CertFreeCertificateContext
CertDuplicateStore
CertOpenStore
CertCloseStore
CertVerifyCertificateChainPolicy
CertEnumCertificatesInStore
secur32
InitializeSecurityContextW
QueryContextAttributesW
EncryptMessage
FreeContextBuffer
DeleteSecurityContext
ApplyControlToken
DecryptMessage
AcquireCredentialsHandleA
FreeCredentialsHandle
AcceptSecurityContext
bcryptprimitives
ProcessPrng
api-ms-win-core-synch-l1-2-0
WaitOnAddress
WakeByAddressAll
WakeByAddressSingle
user32
OpenClipboard
GetClipboardData
DefWindowProcA
RegisterClassExA
CreateWindowExA
ReleaseDC
GetDC
DestroyIcon
CreateIcon
MapVirtualKeyW
VkKeyScanW
GetCursorPos
SendInput
CloseClipboard
GetSystemMetrics
ShowWindow
DispatchMessageW
TranslateMessage
MsgWaitForMultipleObjectsEx
PeekMessageW
RegisterRawInputDevices
SetWindowLongPtrW
MessageBoxW
GetWindowLongPtrW
RedrawWindow
FlashWindowEx
GetClientRect
CreateWindowExW
RegisterClassExW
DestroyWindow
MonitorFromPoint
ValidateRect
SetWindowTextW
TrackPopupMenu
SetMenuDefaultItem
EnableMenuItem
PostMessageW
EmptyClipboard
GetActiveWindow
SendMessageW
SetWindowLongW
LoadCursorW
SetCursor
ReleaseCapture
GetWindowPlacement
SetWindowPlacement
GetMonitorInfoW
MonitorFromWindow
DefWindowProcW
GetRawInputData
GetWindowLongW
GetMenu
AdjustWindowRectEx
MapVirtualKeyExW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
TrackMouseEvent
ScreenToClient
GetTouchInputInfo
MonitorFromRect
CloseTouchInputHandle
GetWindowRect
SetCapture
SystemParametersInfoA
GetClipCursor
ClipCursor
ShowCursor
GetKeyState
IsIconic
SetForegroundWindow
SetWindowDisplayAffinity
RegisterTouchWindow
GetAsyncKeyState
IsProcessDPIAware
SetClipboardData
DestroyCursor
GetForegroundWindow
RegisterWindowMessageA
ChangeDisplaySettingsExW
IsWindowVisible
ClientToScreen
GetSystemMenu
SetWindowPos
InvalidateRgn
shell32
DragQueryFileW
ShellExecuteW
DragFinish
gdi32
SelectObject
DeleteDC
CreateCompatibleDC
DeleteObject
CreateDIBSection
GetPixelFormat
SetPixelFormat
DescribePixelFormat
CreateRectRgn
GetDeviceCaps
ChoosePixelFormat
SwapBuffers
BitBlt
opengl32
wglMakeCurrent
wglGetCurrentContext
wglGetProcAddress
wglCreateContext
wglDeleteContext
d3dcompiler_47
D3DCompile
ole32
OleInitialize
RegisterDragDrop
CoInitializeEx
CoCreateInstance
RevokeDragDrop
CoUninitialize
imm32
ImmAssociateContextEx
ImmReleaseContext
ImmGetContext
ImmGetCompositionStringW
uxtheme
SetWindowTheme
dwmapi
DwmSetWindowAttribute
DwmEnableBlurBehindWindow
Name
.text
Size
6.0MB
Virtual Size
6.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
125.4MB
Virtual Size
125.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
316KB
Virtual Size
315KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
59KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
49KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=144, id=261, version=33145,
count=50, id=260, version=33145,
count=24, id=259, version=33145,
count=9, id=259, version=35403,
count=16, id=260, version=35403,
count=40, id=261, version=35403,
count=11, id=257, version=33145,
count=340, id=1, productName=Unmarked objects,
count=46, productName=Unmarked objects (old),
count=1, id=255, version=35723,
count=1, id=258, version=35723,
docs/specs/spec-template.md
- SHA256 a05d1f6051a868e01b60be95c673a658602b192ecffb094b7a0d899e276197cb
- MD5 66b26c14a5b0b715901ff0aa2315c538
- SHA1 de41acad0e60cb07230a60cc96f8c1630eada323
- SHA512 65f6efd1b2c1796133187a43d2ea641e5460adafa522ec680d78852d53bf7db58562da43d48adedcfba82a73f18a1df19d534c96af46883f941770589985aebf
- TLSH T14F316492670273B501B70252980A69E2EB3BF59C89912281695C80A88397CBDCA3FD89
- MD5 SHA1 SHA512 TLSH