Tıktok Viewer Bot.rar
- SHA256 343f74a1e60efe5233702f9839ba633b385b1be027fa9dcea06a0122bd593317
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
dead.exe
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
15 signatures
150 seconds
General
- Target Tıktok Viewer Bot.rar
- Size 4.7MB
- Sample261104-12razseg89
- SHA256 343f74a1e60efe5233702f9839ba633b385b1be027fa9dcea06a0122bd593317
- MD5 94f6afdbf5c904eaa8c254be5f2b23b6
- SHA1 68237a03fdf9f6b40ccd128f57fd1c72c503d880
- SHA512 8039b80eb31bcfa524db2556976a0d2d0925d63443e4ec3ad766877875275b35bf74dfea99d63b30dfad3f0d29506f9e23e0848ae18815f0b317d95c3ecabede
- SSDEEP 98304:vQ5fNPSGMi2Llr56o369P0LD1GyVVDKdyO+zEs5sIMcuT0PNN:v0VSGMnn6HPmEcxKd7+zEs51OAPz
- TLSH T1BA36338B51C553DA0E9C0BB23D838A1A094C43673B3FE44B9AD3FD9B924D0D71D666A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/dead.exe
File Explorer
-
Tıktok Viewer Bot.rar.rar 4.7MB
-
Read.txt545B
-
dead.exe.exe 9.5MB
Read.txt
- SHA256 8398ea11c0afa051df7b9c5037716b630adc6f91c1d4b50e494852cb20607612
- MD5 7b9c862778cd4af7121b767499c654ff
- SHA1 e4c371a0c53cde36e246f4628d17bdc785a2cb4b
- SHA512 8a291dc5b52de3011c683f9231a088aa3470e4b15809e0bfddcd8878b0d762d14ef7bd5e3a0c8e6f05c351bb5541ad2d5ab378cce510afd29208f30fddf6b764
- TLSH T1E8F0E11BB203017907A382E85085A37BE35764A4B7161081344416001BA033B87BB64D
- MD5 SHA1 SHA512 TLSH
dead.exe
- IMPHASH ed8b780a3ce7ca4aba78a21f6bc3d4e0
- SHA256 97b5376ba6b3ad7f1d120c9590162cd722e5d2f8745538d67184e89927fff585
- MD5 ee68a7a8667e2ac87e196a61f0aec8ca
- SHA1 90ce2e16788709e26395e1f91ef4ff39637f6fb5
- SHA512 7665b66bdc23b3a42224a651e08c465c74c702c11c9826a1b1b83ddc732389305375725901bfb42b8720cc22fa7580696eb7f4a3b0ccf4e402bf58a342fd8c89
- SSDEEP 98304:Z6MzySPm3lv+oedKWEBDIHJQgIkoJAI1vE5bpAlYgau67M:Zza+oeWBDIHJClJA8vEt0Ygalw
- TLSH T165A67C03ECA514E9C1EDE2318AB29653BB717C480B3227D32B90B6396E77BD46D79344
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
556960
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
GetProcAddress
LoadLibraryExW
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
QueryPerformanceCounter
PostQueuedCompletionStatus
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
3.0MB
Virtual Size
3.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3.1MB
Virtual Size
3.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
412KB
Virtual Size
32.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
70KB
Virtual Size
69KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
340B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
545KB
Virtual Size
544KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/32
Size
112KB
Virtual Size
111KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/46
Size
512B
Virtual Size
38B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/65
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/78
Size
526KB
Virtual Size
526KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/95
Size
215KB
Virtual Size
215KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/112
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
61KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
497KB
Virtual Size
496KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ