Insta%20Money%20Latest%20Bot.rar
- SHA256 897117e6f8cd49bbf7b4f0d0aa7741151f266b6dc4474e172b5d3fbd4a537a4a
Password
123
Behavioral task
behavioral1
Sample
Insta%20Money%20Latest%20Bot.rar
Resource
win10v2004-20260513-en
windows10-2004-x64
10 signatures
900 seconds
Behavioral task
behavioral2
Sample
Insta Money Latest Bot/CleanControllerImpl.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral3
Sample
Insta Money Latest Bot/Insta Money Latest Bot.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
900 seconds
Behavioral task
behavioral4
Sample
Insta Money Latest Bot/e_sqlcipher.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral5
Sample
Insta Money Latest Bot/settings.json
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
900 seconds
Behavioral task
behavioral6
Sample
Insta Money Latest Bot/utils.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
General
- Target Insta%20Money%20Latest%20Bot.rar
- Size 5.0MB
- Sample260817-cdvfqs1eqa
- SHA256 897117e6f8cd49bbf7b4f0d0aa7741151f266b6dc4474e172b5d3fbd4a537a4a
- MD5 acc51097085b13d4c80672480ccd09b9
- SHA1 6f856cf9d2d4b87d509a848f61f89a742065797a
- SHA512 8d86ba6511ae835a5ee0ecef4ca861910091bd256e77ecd3f7ec0ba8004bb9f35a20d8aa81b30cbe2aeee7b9a433b574fe7957b07dfd1eb8df81b0223447ce24
- SSDEEP 98304:zwa33bq8vLEQ8OqE9J3kjZ47iB8IjwMLl1GL4CYWETh9hCR8A3Nxj5tHl4:zwa33WuEQ8G9qjZPRLmLSh9hC8
- TLSH T11436336F61D8476E34D056E8AA271024C2EBD5C62382FE24D131C576C6B2DC69EDBBC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Insta Money Latest Bot/Insta Money Latest Bot.exe upx - Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Insta Money Latest Bot/Insta Money Latest Bot.exe
File Explorer
-
Insta%20Money%20Latest%20Bot.rar.rar 5.0MB
-
Insta Money Latest Bot/CleanControllerImpl.dll.dll 8.7MB
-
Insta Money Latest Bot/Insta Money Latest Bot.exe.exe 700.0MB
-
Insta Money Latest Bot/e_sqlcipher.dll.dll 1.8MB
-
Insta Money Latest Bot/settings.json161KB
-
Insta Money Latest Bot/utils.dll1.2MB
Insta Money Latest Bot/CleanControllerImpl.dll
- IMPHASH f32d4db01fe9f9caad43a09c75889064
- SHA256 868b9ae320893804b68bfebe75800f4f589c7836f2120885c8b741fe1fced220
- MD5 c595fbeae263dd38cd95966bf85aab55
- SHA1 9cad83fa15d36f9becb83434f28f6c294a30090e
- SHA512 160001e14cd2d31eb90b8322e91237821e6b0495304350b92882fb5f650e6999cfaeb8ac667c876c3ab7c5d4b33064251b813b1a0f7a45126280a281480204b3
- SSDEEP 98304:twqljKdBFXiDq7BIRIEdoPJGmoiAU/tGizZUaBoV:dFKdBFQq7BHcoPJGmo3U/tfeB
- TLSH T15D968E1676E400E8E4F6C278CE678503EBB2B8550731D7DF0690966A1F73BE19A3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
123
Digest
7f:4a:b5:11:9f:c9:24:ae:4e:58:eb:9a:5a:38:5f:26:c1:c3:5f:53:b4:7b:4d:3a:46:5d:c6:85:0e:c9:b6:dd
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Malwarebytes Inc,O=Malwarebytes Inc,L=Santa Clara,ST=California,C=US
Chains
Feb 21, 2026
CN=Malwarebytes Inc,O=Malwarebytes Inc,L=Santa Clara,ST=California,C=US
CN=Microsoft ID Verified CS EOC CA 01,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Digest
7f:4a:b5:11:9f:c9:24:ae:4e:58:eb:9a:5a:38:5f:26:c1:c3:5f:53:b4:7b:4d:3a:46:5d:c6:85:0e:c9:b6:dd
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=5430750,CN=Malwarebytes Inc,O=Malwarebytes Inc,L=Santa Clara,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Feb 21, 2026
SERIALNUMBER=5430750,CN=Malwarebytes Inc,O=Malwarebytes Inc,L=Santa Clara,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=5430750,CN=Malwarebytes Inc,O=Malwarebytes Inc,L=Santa Clara,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2013 - Jan 15, 2038
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=5430750,CN=Malwarebytes Inc,O=Malwarebytes Inc,L=Santa Clara,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
06:2c:3c:46:81:63:eb:51:3e:02:e9:99:22:67:43:d6
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 13, 2024 - Dec 14, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Serial Number
54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 16, 2020 - Apr 16, 2045
Subject
CN=Malwarebytes Inc,O=Malwarebytes Inc,L=Santa Clara,ST=California,C=US
Serial Number
33:00:07:05:1d:65:68:b9:83:3a:42:77:a5:00:00:00:07:05:1d
Issuer
CN=Microsoft ID Verified CS EOC CA 01,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2026 - Feb 24, 2026
Subject
CN=Microsoft ID Verified CS EOC CA 01,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:06:4a:1a:fa:cf:05:61:6a:74:00:00:00:00:00:06
Issuer
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Apr 13, 2021 - Apr 13, 2026
Subject
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Apr 1, 2021 - Apr 1, 2036
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7800-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:57:24:d3:95:e0:a2:e9:c9:31:00:00:00:00:00:57
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 23, 2025 - Oct 22, 2026
Minor OS version
0
Major OS version
6
Entry point
5422516
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\JENKINS\workspace\N_CleanControllerImpl\bin\x64\Release\CleanControllerImpl.pdb
crypt32
CertCompareCertificateName
CertVerifyCertificateChainPolicy
CertAddCertificateContextToStore
CertCreateCertificateContext
CertGetIssuerCertificateFromStore
CertGetCertificateContextProperty
CertEnumCertificatesInStore
CertOpenSystemStoreW
CertDuplicateCertificateContext
CryptDecodeObjectEx
CryptMsgGetParam
CertGetCertificateChain
CertCreateCertificateChainEngine
CertCloseStore
CertFreeCertificateChain
CertFreeCertificateChainEngine
CertNameToStrW
CertGetNameStringW
CertOpenStore
CryptMsgUpdate
CryptMsgOpenToDecode
CertFindCertificateInStore
CryptQueryObject
CryptMsgClose
CertFreeCertificateContext
CryptDecodeObject
iphlpapi
GetAdaptersInfo
ws2_32
socket
WSARecv
getpeername
WSASend
WSASendTo
inet_addr
ntohl
getaddrinfo
freeaddrinfo
setsockopt
select
WSASocketA
WSASetLastError
inet_ntoa
gethostbyaddr
gethostbyname
getservbyport
sendto
htonl
ioctlsocket
connect
closesocket
bind
shutdown
send
recvfrom
recv
listen
getsockopt
WSAIoctl
getsockname
accept
getservbyname
ntohs
htons
WSACleanup
WSAStartup
WSAGetLastError
WSARecvFrom
kernel32
GetVolumePathNamesForVolumeNameW
GetFullPathNameW
SetFilePointer
WriteFile
FlushFileBuffers
SetFileAttributesW
ReadFile
SetEndOfFile
DeleteFileW
OpenThread
VerSetConditionMask
VerifyVersionInfoW
GetSystemFirmwareTable
FindNextFileW
FindClose
GetVolumeInformationW
ExpandEnvironmentStringsW
GetFileAttributesExW
LocalAlloc
GetDriveTypeW
GetLogicalDrives
GetVersionExW
GetSystemInfo
FormatMessageW
IsWow64Process
GetNativeSystemInfo
SetLastError
HeapFree
Process32FirstW
Process32NextW
Module32NextW
GetLogicalDriveStringsW
CreateProcessW
GetExitCodeProcess
ResumeThread
GetProcessHeap
HeapAlloc
QueryFullProcessImageNameW
TerminateProcess
Thread32First
Thread32Next
TerminateThread
FindFirstFileW
GetFileAttributesW
CreateDirectoryW
GetVolumePathNameW
RemoveDirectoryW
GetSystemWindowsDirectoryW
ProcessIdToSessionId
GetEnvironmentVariableW
GetPrivateProfileStringW
GetLocalTime
GetSystemTime
SystemTimeToFileTime
GetTimeZoneInformation
SetFileTime
CreateWaitableTimerW
SetWaitableTimer
CancelWaitableTimer
FileTimeToLocalFileTime
TzSpecificLocalTimeToSystemTime
LocalFileTimeToFileTime
SystemTimeToTzSpecificLocalTime
WaitForMultipleObjectsEx
GetFileSize
GetCurrentThreadId
GetStdHandle
GetModuleHandleA
GetVersionExA
GetHandleInformation
CreateIoCompletionPort
GetQueuedCompletionStatusEx
InitializeCriticalSection
InitOnceExecuteOnce
SetFileCompletionNotificationModes
ReleaseMutex
CreateMutexW
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
GetStartupInfoW
GetExitCodeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
SetEnvironmentVariableW
VirtualFree
SwitchToFiber
DeleteFiber
CreateFiberEx
GetSystemDirectoryA
LoadLibraryA
FormatMessageA
ReleaseSemaphore
CreateSemaphoreA
GetACP
GetFileType
ConvertFiberToThread
ConvertThreadToFiberEx
GetConsoleMode
SetConsoleMode
ReadConsoleA
QueryDosDeviceW
WriteConsoleW
HeapSize
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
OutputDebugStringW
GetWindowsDirectoryW
GetCurrentProcess
GetModuleFileNameW
GlobalFree
MultiByteToWideChar
WideCharToMultiByte
VirtualQueryEx
Module32FirstW
CreateToolhelp32Snapshot
OpenProcess
GetCurrentProcessId
MoveFileExW
GetTempPathW
FreeLibrary
LoadLibraryW
GetVolumeNameForVolumeMountPointW
CreateEventA
GetCurrentThread
SetThreadPriority
WakeConditionVariable
WTSGetActiveConsoleSessionId
CreateFileW
GetCurrentDirectoryW
SetFileInformationByHandle
GetFileInformationByHandleEx
DeviceIoControl
QueryPerformanceCounter
QueryPerformanceFrequency
GetFileInformationByHandle
ReleaseSRWLockShared
AcquireSRWLockShared
CopyFileW
GlobalAlloc
GetTickCount64
FileTimeToSystemTime
lstrcmpA
SleepConditionVariableSRW
WakeAllConditionVariable
InitializeConditionVariable
CompareFileTime
FindNextChangeNotification
WaitForSingleObject
WaitForMultipleObjects
FindFirstChangeNotificationW
FindCloseChangeNotification
CreateEventW
LocalFree
GetFileSizeEx
GetShortPathNameW
GetLongPathNameW
GetFileTime
GetTickCount
GetSystemTimeAsFileTime
CloseHandle
DecodePointer
GetProcAddress
GetModuleHandleW
DeleteCriticalSection
InitializeCriticalSectionEx
GetSystemDirectoryW
ResetEvent
SetEvent
GetLastError
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeSRWLock
EnterCriticalSection
LeaveCriticalSection
SwitchToThread
Sleep
GetCommandLineA
GetOEMCP
IsValidCodePage
SetStdHandle
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SetConsoleCtrlHandler
ExitProcess
GetConsoleOutputCP
SetFilePointerEx
PeekNamedPipe
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
RtlPcToFileHeader
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwindEx
RaiseException
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead
GetCPInfo
CompareStringEx
LCMapStringEx
EncodePointer
FindFirstFileExW
GetStringTypeW
ReadConsoleW
RtlUnwind
user32
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxW
CharUpperW
advapi32
CryptCreateHash
SetEntriesInAclW
SetNamedSecurityInfoW
GetExplicitEntriesFromAclW
ConvertSidToStringSidW
DeleteAce
ConvertStringSidToSidW
OpenProcessToken
ImpersonateLoggedOnUser
InitiateSystemShutdownW
CryptReleaseContext
CryptAcquireContextW
CryptHashData
CryptDestroyHash
CryptGetHashParam
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
IsTextUnicode
AllocateAndInitializeSid
GetSecurityInfo
SetSecurityInfo
TreeSetNamedSecurityInfoW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyW
RegEnumKeyExW
RegEnumValueW
RegLoadKeyW
RegLoadAppKeyW
RegQueryInfoKeyW
RegRestoreKeyW
RegSaveKeyW
RegSetValueExW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
CryptEnumProvidersW
CryptSignHashW
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
CryptGenRandom
CryptAcquireContextA
CreateWellKnownSid
GetSidSubAuthority
GetSidSubAuthorityCount
AreAllAccessesGranted
MapGenericMask
FreeSid
LsaNtStatusToWinError
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenThreadToken
RegUnLoadKeyW
GetNamedSecurityInfoW
shell32
SHGetFolderPathW
ole32
CoUninitialize
CoInitializeEx
CoCreateInstance
CoTaskMemFree
CoInitializeSecurity
StringFromGUID2
PropVariantClear
CoSetProxyBlanket
oleaut32
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
SafeArrayGetVartype
SafeArrayUnlock
SafeArrayLock
SafeArrayDestroy
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
SysStringLen
VariantClear
VariantInit
SysAllocString
SysFreeString
mpr
WNetGetConnectionW
wintrust
CryptCATAdminAcquireContext
CryptCATAdminCalcHashFromFileHandle
CryptCATAdminEnumCatalogFromHash
CryptCATCatalogInfoFromContext
WinVerifyTrust
CryptCATAdminReleaseContext
CryptCATAdminReleaseCatalogContext
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
wtsapi32
WTSQuerySessionInformationW
WTSFreeMemory
WTSEnumerateSessionsW
vssapi
CreateVssBackupComponentsInternal
VssFreeSnapshotPropertiesInternal
sfc
SfcIsFileProtected
rpcrt4
RpcStringFreeW
UuidToStringW
netapi32
NetWkstaGetInfo
NetApiBufferFree
psapi
GetModuleFileNameExW
EnumProcessModulesEx
GetMappedFileNameW
GetProcessImageFileNameW
ntdll
RtlCaptureContext
RtlLookupFunctionEntry
NtTerminateThread
RtlVirtualUnwind
NtTerminateProcess
authz
AuthzInitializeContextFromSid
AuthzAccessCheck
AuthzFreeContext
AuthzFreeResourceManager
AuthzInitializeResourceManager
bcrypt
BCryptOpenAlgorithmProvider
BCryptVerifySignature
BCryptCloseAlgorithmProvider
BCryptDestroyKey
BCryptDestroyHash
BCryptImportKeyPair
BCryptHashData
BCryptFinishHash
BCryptGetProperty
BCryptCreateHash
CCI_CleanParameters_AddIgnoreTraceID
CCI_CleanParameters_ConstructNew
CCI_CleanParameters_Delete
CCI_CleanParameters_GetAutoRebootUponDOR
CCI_CleanParameters_GetClientIdentifiers
CCI_CleanParameters_GetDetectionResultsID
CCI_CleanParameters_GetDetectionResultsPath
CCI_CleanParameters_SetAutoRebootUponDOR
CCI_CleanParameters_SetClientIdentifiers
CCI_CleanParameters_SetDetectionResultsPath
CCI_ClearDORCompletedStatus
CCI_ClearEngineClsCaches
CCI_Create
CCI_DeleteHistoryLog
CCI_DeleteQuarantineItems
CCI_DeleteQuarantineItemsAsync
CCI_Destroy
CCI_GetAllowDataCollection
CCI_GetCleanFeatureEnabled
CCI_GetClientSchemaVersionForQuarantineDeletionStatus
CCI_GetCurrentCleanParameters
CCI_GetEnableMassUnquarantine
CCI_GetHistoryFileContents
CCI_GetLastOverallCleanResult
CCI_GetMajorAPIVersion
CCI_GetMaxNumItemsInQuarantineDeletionStatus
CCI_GetMinorAPIVersion
CCI_GetQuarantinePath
CCI_GetQuarantinePruningAge
CCI_GetUserDefinedWLRules
CCI_GetWhiteListStatus
CCI_HistoryEnumerator_ConstructNew
CCI_HistoryEnumerator_Delete
CCI_HistoryEnumerator_GetHistoryFileEntryAt
CCI_HistoryEnumerator_GetNumberOfHistoryFiles
CCI_IsALinkerInUse
CCI_IsAsyncOperationPreventingUpdatesInProgress
CCI_IsChromeResetPromptRequired
CCI_IsCleanInProgress
CCI_IsDLLNewlyLoaded
CCI_IsDORCompleted
CCI_IsDORRequired
CCI_IsFileWhiteListed
CCI_IsFileWhiteListedEx
CCI_IsFileWhiteListedExV2
CCI_IsFileWhiteListedV2
CCI_IsStartupComplete
CCI_Linker_ConstructNew
CCI_Linker_Delete
CCI_Linker_FindLinkedTraces
CCI_Linker_SetTraceLinkedCallback
CCI_PerformTestOperation
CCI_ProxySettings_SetAuthEnabled
CCI_ProxySettings_SetEnabled
CCI_ProxySettings_SetHostName
CCI_ProxySettings_SetPassword
CCI_ProxySettings_SetPortNumber
CCI_ProxySettings_SetUserName
CCI_PruneQuarantine
CCI_QuarantineItemData_ConstructNew
CCI_QuarantineItemData_Delete
CCI_QuarantineItemData_GetCleanResultData
CCI_QuarantineItemData_GetCleanTime
CCI_QuarantineItemData_GetCreatedModifiedDate
CCI_QuarantineItemData_GetDetectionData
CCI_QuarantineItemData_GetObjectData
CCI_QuarantineItemData_GetObjectHashes
CCI_QuarantineItemData_GetParentData
CCI_QuarantineItemData_GetThreatData
CCI_QuarantineItemEnumerator_ConstructNew
CCI_QuarantineItemEnumerator_Delete
CCI_QuarantineItemEnumerator_GetNextQuarantineItemId
CCI_QueueClean
CCI_RefreshSystemPaths
CCI_RestoreQuarantineItems
CCI_RestoreQuarantineItemsAsync
CCI_ScanCancelledNotification
CCI_ScanCompletedNotification
CCI_ScanStartedNotification
CCI_SendAllQuarantineMetadata
CCI_SessionLogonNotification
CCI_SetAllowDataCollection
CCI_SetAlternateURLsOption
CCI_SetCleanFeatureEnabled
CCI_SetCleanFeatureEnabledChangedCallback
CCI_SetCleanStateChangedCallback
CCI_SetCleanStateChangedCallbackV2
CCI_SetClientSchemaVersionForQuarantineDeletionStatus
CCI_SetDeleteQuarantineItemsCompleteCallback
CCI_SetEnableMassUnquarantine
CCI_SetGetAllowDataCollectionStateCallback
CCI_SetGetAutoStartOverrideSettingCallback
CCI_SetGetAutoStartUserSettingCallback
CCI_SetGetLicenseConfigDataCallback
CCI_SetHistoryLogAddedCallback
CCI_SetHistoryLogRemovedCallback
CCI_SetItemRemediatedCallback
CCI_SetLicenseState
CCI_SetLogCallback
CCI_SetMWACTelemetryCallback
CCI_SetMassUnquarantineCompleteCallback
CCI_SetMaxLogLevel
CCI_SetMaxNumItemsInQuarantineDeletionStatus
CCI_SetQuarantineItemAddedCallback
CCI_SetQuarantineItemAddedCallbackV2
CCI_SetQuarantineItemDeletedStatusCallback
CCI_SetQuarantineItemDeletedStatusCallbackV2
CCI_SetQuarantineItemRemovedCallback
CCI_SetQuarantineItemRestoredStatusCallback
CCI_SetQuarantineItemRestoredStatusCallbackMUR
CCI_SetQuarantineItemRestoredStatusCallbackV2
CCI_SetQuarantineItemsDeletionCompleteCallback
CCI_SetQuarantineItemsDeletionStartedCallback
CCI_SetQuarantineItemsDeletionStatusCallback
CCI_SetQuarantinePath
CCI_SetQuarantinePruningAge
CCI_SetQuarantinePruningAgeChangedCallback
CCI_SetReceiveQuarantineMetadataCallback
CCI_SetRestoreQuarantineItemsCompleteCallback
CCI_SetSetAutoStartOverrideSettingCallback
CCI_SetShutdownServiceCallback
CCI_SetStartMainUICallback
CCI_SetStartupCompleteCallback
CCI_SetStopRequested
CCI_SetUserDefinedWLRules
CCI_Start
CCI_StartReloadCleanDB
CCI_Stop
CCI_StopCurrentClean
CCI_StopV2
Name
.text
Size
5.8MB
Virtual Size
5.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2.3MB
Virtual Size
2.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
204KB
Virtual Size
232KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
281KB
Virtual Size
281KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
500B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
77KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=259, version=30795,
count=198, id=261, version=30795,
count=1, productName=Unmarked objects (old),
count=1, id=263, version=30795,
count=1, id=262, version=30795,
count=17, id=260, version=33030,
count=18, id=259, version=33030,
count=98, id=261, version=33030,
count=32, id=260, version=30795,
count=965, id=260, version=33134,
count=284, id=261, version=33134,
count=494, id=1, productName=Unmarked objects,
count=45, id=257, version=30795,
count=226, id=265, version=33133,
count=1, id=256, version=33133,
count=1, id=255, version=33133,
count=1, id=151,
count=1, id=258, version=33133,
Insta Money Latest Bot/Insta Money Latest Bot.exe
- SHA256 4ca03bb7a95f6a6a2a531094277c440a5dfe167e55b5de3e365e2b72ca5b2962
- MD5 ccd16a74a874e38e16ce6430c307c293
- SHA1 22df5ccca0e24a7143c623a869c7acb5b80f7fa2
- SHA512 3e2d34de096b0c399005617b72eea1f7c0f0b755fc010992a6cf87864842c4092381f79380d961d7b01dcb7e3d923482b419ed7929274b624a02a193a2460e81
- SSDEEP 1536:glsedG5OyNzbtweGBfTH2pMVH3L9ikKGRp0cgotE7RbCxuf+Uf1lPLB926eD12C:giFOyFbtkVP5Lk6p0cfARLfnjeJJff8
- TLSH T178790247AE63E2FECA313A321C4FD49016EDE83B41B8976B4370F5BD5D64A946A00398
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
296832
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
UPX0
Size
Virtual Size
188KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
101KB
Virtual Size
104KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=160, id=261, version=33145,
count=17, id=260, version=33145,
count=7, id=259, version=33145,
count=10, id=259, version=35721,
count=16, id=260, version=35721,
count=1, id=262, version=33145,
count=86, id=261, version=35721,
count=13, id=257, version=33145,
count=134, id=1, productName=Unmarked objects,
count=1, id=265, version=36231,
count=1, id=255, version=36231,
count=1, id=258, version=36231,
Insta Money Latest Bot/e_sqlcipher.dll
- IMPHASH 837efae88e7cbfceb936c9a8c207615c
- SHA256 1af140a4696ced6246df6513d6210317c6e4e7da55c24cac8b6e8357d9f770fa
- MD5 46da86eaee9f54f1544fa317bf4d07b4
- SHA1 cf0ee479aec0f5098692340bbd8463bcc4160a06
- SHA512 5ea9516c6e74a374ea02d485eed2c09855ab324731d8428fa92a6ae4827874709cbe649d5b6d6120c5d358b16afe3eb85abcf21c873f25d6f8396302954407fd
- SSDEEP 24576:NOAtE1Tfv9L8Y4D2OyiNilZmD0PgZCYyx6A8YuA7x/PME87BA2sufiXc4:N8tdy2OgmDGdxGYH7JVtc4
- TLSH T123857D0BA2B900ACD8A7D278CA17970FDBF174151764ABDB159086952F23FF61E7A330
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
123
Digest
d2:8e:d3:f3:f8:e5:7d:bd:5a:c7:98:c9:48:74:f5:9d:53:68:97:5b:64:f5:c3:08:56:9e:0d:72:96:f2:e7:f6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Malwarebytes Inc,O=Malwarebytes Inc,L=Santa Clara,ST=California,C=US
Chains
Mar 18, 2026
CN=Malwarebytes Inc,O=Malwarebytes Inc,L=Santa Clara,ST=California,C=US
CN=Microsoft ID Verified CS AOC CA 01,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Digest
d2:8e:d3:f3:f8:e5:7d:bd:5a:c7:98:c9:48:74:f5:9d:53:68:97:5b:64:f5:c3:08:56:9e:0d:72:96:f2:e7:f6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=5430750,CN=Malwarebytes Inc,O=Malwarebytes Inc,L=Santa Clara,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Mar 18, 2026
SERIALNUMBER=5430750,CN=Malwarebytes Inc,O=Malwarebytes Inc,L=Santa Clara,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=5430750,CN=Malwarebytes Inc,O=Malwarebytes Inc,L=Santa Clara,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2013 - Jan 15, 2038
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=5430750,CN=Malwarebytes Inc,O=Malwarebytes Inc,L=Santa Clara,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
06:2c:3c:46:81:63:eb:51:3e:02:e9:99:22:67:43:d6
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 13, 2024 - Dec 14, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Serial Number
54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 16, 2020 - Apr 16, 2045
Subject
CN=Malwarebytes Inc,O=Malwarebytes Inc,L=Santa Clara,ST=California,C=US
Serial Number
33:00:08:88:fb:a9:17:7e:1b:98:02:e6:1f:00:00:00:08:88:fb
Issuer
CN=Microsoft ID Verified CS AOC CA 01,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 18, 2026 - Mar 21, 2026
Subject
CN=Microsoft ID Verified CS AOC CA 01,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:07:37:8c:5b:a1:d9:5b:8c:d4:00:00:00:00:00:07
Issuer
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Apr 13, 2021 - Apr 13, 2026
Subject
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Apr 1, 2021 - Apr 1, 2036
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7D00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:55:d9:dd:69:26:28:f9:f8:e2:00:00:00:00:00:55
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 23, 2025 - Oct 22, 2026
Minor OS version
0
Major OS version
6
Entry point
1363440
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\cb\cb\cb\bld\bin\e_sqlcipher\win\v142\plain\x64\e_sqlcipher.pdb
kernel32
FlushFileBuffers
GetTickCount
QueryPerformanceCounter
MapViewOfFile
CreateFileMappingW
FormatMessageA
GetSystemTime
GetSystemTimeAsFileTime
WideCharToMultiByte
FreeLibrary
SystemTimeToFileTime
GetProcessHeap
GetCurrentProcessId
GetFileSize
LockFileEx
LocalFree
GetProcAddress
UnlockFile
HeapDestroy
HeapCompact
HeapAlloc
LoadLibraryW
GetSystemInfo
CloseHandle
HeapReAlloc
DeleteFileW
DeleteFileA
WaitForSingleObjectEx
LoadLibraryA
CreateFileA
FlushViewOfFile
OutputDebugStringW
GetFileAttributesExW
GetFileAttributesA
GetLastError
GetDiskFreeSpaceA
FormatMessageW
GetTempPathA
Sleep
MultiByteToWideChar
HeapSize
HeapValidate
UnmapViewOfFile
GetFileAttributesW
CreateFileW
WaitForSingleObject
CreateMutexW
GetTempPathW
UnlockFileEx
SetEndOfFile
GetFullPathNameA
SetFilePointer
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
WriteFile
GetFullPathNameW
HeapFree
HeapCreate
ReadFile
AreFileApisANSI
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
VirtualLock
VirtualUnlock
MoveFileExW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
WriteConsoleW
RtlUnwindEx
InterlockedFlushSList
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetStdHandle
GetFileType
GetTimeZoneInformation
GetConsoleMode
ReadConsoleW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetConsoleOutputCP
SetStdHandle
GetStringTypeW
GetFileSizeEx
SetFilePointerEx
sqlite3_activate_see
sqlite3_aggregate_context
sqlite3_aggregate_count
sqlite3_auto_extension
sqlite3_autovacuum_pages
sqlite3_backup_finish
sqlite3_backup_init
sqlite3_backup_pagecount
sqlite3_backup_remaining
sqlite3_backup_step
sqlite3_bind_blob
sqlite3_bind_blob64
sqlite3_bind_double
sqlite3_bind_int
sqlite3_bind_int64
sqlite3_bind_null
sqlite3_bind_parameter_count
sqlite3_bind_parameter_index
sqlite3_bind_parameter_name
sqlite3_bind_pointer
sqlite3_bind_text
sqlite3_bind_text16
sqlite3_bind_text64
sqlite3_bind_value
sqlite3_bind_zeroblob
sqlite3_bind_zeroblob64
sqlite3_blob_bytes
sqlite3_blob_close
sqlite3_blob_open
sqlite3_blob_read
sqlite3_blob_reopen
sqlite3_blob_write
sqlite3_busy_handler
sqlite3_busy_timeout
sqlite3_cancel_auto_extension
sqlite3_changes
sqlite3_changes64
sqlite3_clear_bindings
sqlite3_close
sqlite3_close_v2
sqlite3_collation_needed
sqlite3_collation_needed16
sqlite3_column_blob
sqlite3_column_bytes
sqlite3_column_bytes16
sqlite3_column_count
sqlite3_column_database_name
sqlite3_column_database_name16
sqlite3_column_decltype
sqlite3_column_decltype16
sqlite3_column_double
sqlite3_column_int
sqlite3_column_int64
sqlite3_column_name
sqlite3_column_name16
sqlite3_column_origin_name
sqlite3_column_origin_name16
sqlite3_column_table_name
sqlite3_column_table_name16
sqlite3_column_text
sqlite3_column_text16
sqlite3_column_type
sqlite3_column_value
sqlite3_commit_hook
sqlite3_compileoption_get
sqlite3_compileoption_used
sqlite3_complete
sqlite3_complete16
sqlite3_config
sqlite3_context_db_handle
sqlite3_create_collation
sqlite3_create_collation16
sqlite3_create_collation_v2
sqlite3_create_filename
sqlite3_create_function
sqlite3_create_function16
sqlite3_create_function_v2
sqlite3_create_module
sqlite3_create_module_v2
sqlite3_create_window_function
sqlite3_data_count
sqlite3_data_directory
sqlite3_database_file_object
sqlite3_db_cacheflush
sqlite3_db_config
sqlite3_db_filename
sqlite3_db_handle
sqlite3_db_mutex
sqlite3_db_name
sqlite3_db_readonly
sqlite3_db_release_memory
sqlite3_db_status
sqlite3_declare_vtab
sqlite3_deserialize
sqlite3_drop_modules
sqlite3_enable_load_extension
sqlite3_enable_shared_cache
sqlite3_errcode
sqlite3_errmsg
sqlite3_errmsg16
sqlite3_error_offset
sqlite3_errstr
sqlite3_exec
sqlite3_expanded_sql
sqlite3_expired
sqlite3_extended_errcode
sqlite3_extended_result_codes
sqlite3_file_control
sqlite3_filename_database
sqlite3_filename_journal
sqlite3_filename_wal
sqlite3_finalize
sqlite3_free
sqlite3_free_filename
sqlite3_free_table
sqlite3_get_autocommit
sqlite3_get_auxdata
sqlite3_get_table
sqlite3_global_recover
sqlite3_hard_heap_limit64
sqlite3_initialize
sqlite3_interrupt
sqlite3_key
sqlite3_key_v2
sqlite3_keyword_check
sqlite3_keyword_count
sqlite3_keyword_name
sqlite3_last_insert_rowid
sqlite3_libversion
sqlite3_libversion_number
sqlite3_limit
sqlite3_load_extension
sqlite3_log
sqlite3_malloc
sqlite3_malloc64
sqlite3_memory_alarm
sqlite3_memory_highwater
sqlite3_memory_used
sqlite3_mprintf
sqlite3_msize
sqlite3_mutex_alloc
sqlite3_mutex_enter
sqlite3_mutex_free
sqlite3_mutex_leave
sqlite3_mutex_try
sqlite3_next_stmt
sqlite3_open
sqlite3_open16
sqlite3_open_v2
sqlite3_os_end
sqlite3_os_init
sqlite3_overload_function
sqlite3_prepare
sqlite3_prepare16
sqlite3_prepare16_v2
sqlite3_prepare16_v3
sqlite3_prepare_v2
sqlite3_prepare_v3
sqlite3_profile
sqlite3_progress_handler
sqlite3_randomness
sqlite3_realloc
sqlite3_realloc64
sqlite3_rekey
sqlite3_rekey_v2
sqlite3_release_memory
sqlite3_reset
sqlite3_reset_auto_extension
sqlite3_result_blob
sqlite3_result_blob64
sqlite3_result_double
sqlite3_result_error
sqlite3_result_error16
sqlite3_result_error_code
sqlite3_result_error_nomem
sqlite3_result_error_toobig
sqlite3_result_int
sqlite3_result_int64
sqlite3_result_null
sqlite3_result_pointer
sqlite3_result_subtype
sqlite3_result_text
sqlite3_result_text16
sqlite3_result_text16be
sqlite3_result_text16le
sqlite3_result_text64
sqlite3_result_value
sqlite3_result_zeroblob
sqlite3_result_zeroblob64
sqlite3_rollback_hook
sqlite3_rtree_geometry_callback
sqlite3_rtree_query_callback
sqlite3_serialize
sqlite3_set_authorizer
sqlite3_set_auxdata
sqlite3_set_last_insert_rowid
sqlite3_shutdown
sqlite3_sleep
sqlite3_snapshot_cmp
sqlite3_snapshot_free
sqlite3_snapshot_get
sqlite3_snapshot_open
sqlite3_snapshot_recover
sqlite3_snprintf
sqlite3_soft_heap_limit
sqlite3_soft_heap_limit64
sqlite3_sourceid
sqlite3_sql
sqlite3_status
sqlite3_status64
sqlite3_step
sqlite3_stmt_busy
sqlite3_stmt_isexplain
sqlite3_stmt_readonly
sqlite3_stmt_status
sqlite3_str_append
sqlite3_str_appendall
sqlite3_str_appendchar
sqlite3_str_appendf
sqlite3_str_errcode
sqlite3_str_finish
sqlite3_str_length
sqlite3_str_new
sqlite3_str_reset
sqlite3_str_value
sqlite3_str_vappendf
sqlite3_strglob
sqlite3_stricmp
sqlite3_strlike
sqlite3_strnicmp
sqlite3_system_errno
sqlite3_table_column_metadata
sqlite3_temp_directory
sqlite3_test_control
sqlite3_thread_cleanup
sqlite3_threadsafe
sqlite3_total_changes
sqlite3_total_changes64
sqlite3_trace
sqlite3_trace_v2
sqlite3_transfer_bindings
sqlite3_txn_state
sqlite3_update_hook
sqlite3_uri_boolean
sqlite3_uri_int64
sqlite3_uri_key
sqlite3_uri_parameter
sqlite3_user_data
sqlite3_value_blob
sqlite3_value_bytes
sqlite3_value_bytes16
sqlite3_value_double
sqlite3_value_dup
sqlite3_value_free
sqlite3_value_frombind
sqlite3_value_int
sqlite3_value_int64
sqlite3_value_nochange
sqlite3_value_numeric_type
sqlite3_value_pointer
sqlite3_value_subtype
sqlite3_value_text
sqlite3_value_text16
sqlite3_value_text16be
sqlite3_value_text16le
sqlite3_value_type
sqlite3_version
sqlite3_vfs_find
sqlite3_vfs_register
sqlite3_vfs_unregister
sqlite3_vmprintf
sqlite3_vsnprintf
sqlite3_vtab_collation
sqlite3_vtab_config
sqlite3_vtab_distinct
sqlite3_vtab_in
sqlite3_vtab_in_first
sqlite3_vtab_in_next
sqlite3_vtab_nochange
sqlite3_vtab_on_conflict
sqlite3_vtab_rhs_value
sqlite3_wal_autocheckpoint
sqlite3_wal_checkpoint
sqlite3_wal_checkpoint_v2
sqlite3_wal_hook
sqlite3_win32_is_nt
sqlite3_win32_mbcs_to_utf8
sqlite3_win32_mbcs_to_utf8_v2
sqlite3_win32_set_directory
sqlite3_win32_set_directory16
sqlite3_win32_set_directory8
sqlite3_win32_sleep
sqlite3_win32_unicode_to_utf8
sqlite3_win32_utf8_to_mbcs
sqlite3_win32_utf8_to_mbcs_v2
sqlite3_win32_utf8_to_unicode
sqlite3_win32_write_debug
sqlite3pager_error
sqlite3pager_is_sj_pgno
sqlite3pager_reset
Name
.text
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
238KB
Virtual Size
238KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
24KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
58KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=259, version=30795,
count=157, id=261, version=30795,
count=11, id=260, version=30795,
count=3, id=257, version=30795,
count=140, id=1, productName=Unmarked objects,
count=32, id=261, version=30034,
count=14, id=260, version=30034,
count=9, id=259, version=30034,
count=33, id=260, version=30147,
count=1, id=256, version=30147,
count=1, id=255, version=30147,
count=1, id=258, version=30147,
Insta Money Latest Bot/settings.json
- SHA256 8521700f4958f0b919fb6770584a0bc25b64fda4e347e95d156e9da2a1ee3eb6
- MD5 72bdb4cee75cf77ef4ff35a7fe81fe7f
- SHA1 25ecca37d7ec3aba23da4aadfce98010b7d02c6d
- SHA512 8f4579edbde1944248fa2de49541092c153c5f5ec2f7ea5f6274b39d0d25e456c3c9ebf4a4a6b46efeb34ee8c8772e90d146d088cd14b5fa0999a4bc57392891
- SSDEEP 3072:ZAYOgjz4Y17/y/4D15f4Otk8KSQG3a58AZQDq/Yb31BHPHsOZlmuMt9LR:ZHGYdS8v3JAVYb3rHPHFUuW/
- TLSH T152F313F105795BBF164289C47090252CB41A8659D872F94C08D71A93DCDAE33BEFF6B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Insta Money Latest Bot/utils.dll
- SHA256 153db5b04b487099fe45f0a96faa077d2230f0c132ddbedb5334f9bdcb779093
- MD5 4784c4f0d07907861701e3941835ae8d
- SHA1 6c6f23d1537ea5cb37c3a56a2e34f0ca75e88fa5
- SHA512 20c9c22801d242c71317bc7d0d2453c42dba93ee6a780dd412b6ddac81585e0f8663fa7db234cd20ebdb2d2e4c7742f7daa73f4d146dabc4a10921a92d244bc2
- SSDEEP 24576:h0hlSv7cEYMQkrSsQkHTpOokYc+YSP2IzHR57jcU21jqJjepi2xKxi:h0jYcerSMTeYcoXcD+JCpzxKxi
- TLSH T1F44533467DDB077546690A45148B6CD06003BF58E6B4C0F2CBE97F7FE90A344166A4EF
- MD5 SHA1 SHA512 SSDEEP TLSH