viewbot (2).zip
- SHA256 022792e8b0d540bdf9f744bb81ea7b4125075d03cf752d2ac19544374bb81d3e
Overview
overview
6Static
static
3viewbot (2).zip
windows10-2004-x64
1viewbot (2).zip
windows11-ltsc_2024-x64
1viewbot (2...ot.exe
windows10-2004-x64
3viewbot (2...ot.exe
windows11-ltsc_2024-x64
3viewbot (2...go.mod
windows10-2004-x64
6viewbot (2...go.mod
windows11-ltsc_2024-x64
1viewbot (2...go.sum
windows10-2004-x64
3viewbot (2...go.sum
windows11-ltsc_2024-x64
3viewbot (2...ain.js
windows10-2004-x64
3viewbot (2...ain.js
windows11-ltsc_2024-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
viewbot (2).zip
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
viewbot (2).zip
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
viewbot (2)/viewbot/0x21 viewbot.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
viewbot (2)/viewbot/0x21 viewbot.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
viewbot (2)/viewbot/go.mod
Resource
win10v2004-20260911-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral6
Sample
viewbot (2)/viewbot/go.mod
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
Behavioral task
behavioral7
Sample
viewbot (2)/viewbot/go.sum
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral8
Sample
viewbot (2)/viewbot/go.sum
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral9
Sample
viewbot (2)/viewbot/main.js
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral10
Sample
viewbot (2)/viewbot/main.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target viewbot (2).zip
- Size 5.1MB
- Sample261030-nclyraysc1
- SHA256 022792e8b0d540bdf9f744bb81ea7b4125075d03cf752d2ac19544374bb81d3e
- MD5 a5b2dbec07b5700831da9d339898bdf5
- SHA1 3575074be3caedcafc286caa75acf05c25d73822
- SHA512 eacaea4e673431ff547b8bf90faa2e4cd0f45e606fcb9ff9938deff2a2fbd86889d301beba30815ba05b0d4c74e7ec287c29468d35e5950ee19d3e9983247c70
- SSDEEP 98304:lOEszYffw2Q84FGFdZwUnna9FAixk37LrcUkLeVG+5o9YXs0Him+yv7/zPbsULj6:0jzYl4IyUCAiMrkL7+0YXPHYQV6
- TLSH T1644633419412821A9BF2F30F1E8F1B74E1E19EECF3624B4AEBBEDDC1BD624519514CA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/viewbot (2)/viewbot/0x21 viewbot.exe
File Explorer
-
viewbot (2).zip.zip 5.1MB
-
viewbot (2)/viewbot/0x21 viewbot.exe.exe 9.5MB
-
viewbot (2)/viewbot/go.mod218B
-
viewbot (2)/viewbot/go.sum749B
-
viewbot (2)/viewbot/main.go.js 25KB
viewbot (2)/viewbot/0x21 viewbot.exe
- IMPHASH ed8b780a3ce7ca4aba78a21f6bc3d4e0
- SHA256 fee576a6c6fbb39b46e3f7e69c3fdd4114027de07cbbad45db9c9433f01072df
- MD5 669b64952ee4ce24023fde6f4c827726
- SHA1 109b45ddf0806a4678a6da3bf7e9e5c250472a19
- SHA512 12068052b76707e63b88e90b913cf0b83ab5c12036129242ebd1992dcd2e1c4151cda4f7078ded4ee7a659f00a5663c2679dc2b9cbfce5fa64ee4b345a0c167e
- SSDEEP 98304:aSJc1ea706SkHwZEYLs5yIzb456S2P8S41GBPQFwM7:avk6SkZYLTI345WPx
- TLSH T1D4A67B03EC6564E9C1ADE2308AA39262BB757C480B3227D32B90F6747E77BD06D79354
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
556960
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
GetProcAddress
LoadLibraryExW
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
QueryPerformanceCounter
PostQueuedCompletionStatus
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
3.0MB
Virtual Size
3.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3.1MB
Virtual Size
3.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
412KB
Virtual Size
32.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
70KB
Virtual Size
69KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
340B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
545KB
Virtual Size
545KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/32
Size
112KB
Virtual Size
111KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/46
Size
512B
Virtual Size
48B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/65
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/78
Size
526KB
Virtual Size
526KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/95
Size
215KB
Virtual Size
215KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/112
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
61KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
497KB
Virtual Size
496KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
viewbot (2)/viewbot/go.mod
- SHA256 946ff61e139546b0e1eda8a74e70fec67a99e8f8f60a71a9035d4b5f4ab5b303
- MD5 bd05a3a1988217b3fc1b7c33803561cd
- SHA1 12c09520bdf2d995704d7fe9fdb992960c830636
- SHA512 8604dc779d5641de906d5c7ea13a9fbddf6cc81b01ce29b93f52ab26bfede29419a4537bdb791dad5771239698e24ac53fe34c031b2c2ff61ffaa2ed53bed3ae
- TLSH T1C2D0A79067D868C93A1144C4D44640004EF1C060BF6DE1BC1CB32974946A491434E523
- MD5 SHA1 SHA512 TLSH
viewbot (2)/viewbot/go.sum
- SHA256 9fa3153cdd79953a93a22f76b0e78d2ce282cba952487b15e72f52461d5c8863
- MD5 d3376ac70f0f7e59d05e84b4e36e7087
- SHA1 5a0855fd2281256189b5161250647bc156381f0c
- SHA512 495bcc21f6b61c6b4489a69e126de0058d2e87e2a5f8c30873fb7a7a0b40bc1aa364ee603be5b75d9d9a7e047e50d9a2e4770f41bf85fee14c614063e7de4613
- TLSH T1BD01BD40EAE427D84BA1D864B8E5015C39A0A8106029F0FF2DF31535E4BF1824B4D93B
- MD5 SHA1 SHA512 TLSH
viewbot (2)/viewbot/main.go
- SHA256 a3b8c6131f36578a57c7bb59b696eeff6ec7bb9c4c0bfe7b89c102cc32747409
- MD5 d645b3a830c92484c7e5b1940530173e
- SHA1 079189d25b139a6f76be24211b87675dc413881d
- SHA512 a36f18601cbd793dbd87b1e04a1522ed933f11a9728efcc0b9e608cdf502ca5f8bb08d01f28988a7c32b079793340ad9ea4faa1afede2951ffe9302f94d10f33
- SSDEEP 384:ejZ6sian1oRcmdQdYNdocxykPm9T9taoH3GXb0AnbbGGC9K949kf:eJn1wEYIF3gvbCu
- TLSH T14CC22B43E359C1232C8B8008DCD8D9C897EE641748B5A8BAFCDE57F8175D6E7A2349B4
- MD5 SHA1 SHA512 SSDEEP TLSH