Static task
static1
Behavioral task
behavioral1
Sample
KiddionsMod.exe
Resource
win7-en-20211208
General
-
Target
KiddionsMod.exe
-
Size
1.3MB
-
MD5
19cfd5a417830805d328cc9e09dc14c1
-
SHA1
836b391c349ae25da63c33438aa6a8f4b1e10748
-
SHA256
cb69d24dbd59161cdbc6483fe59b0fc5cec108973d5a20a0636370e7c27ab201
-
SHA512
1b2cf065b606d65e2253fda80c15848d80d3a1e0b5ab11f3cb3b73864704ca90a8d99d6e92ca45b95269dc04612822883ea87eb31da5fcd5fd992a02ab36546b
-
SSDEEP
24576:CJJbukAavh+FrAumOeo81qCZwmS09IE2h63SxV3XcCyZLYQ:C/bWaZRCxXcP
Malware Config
Signatures
Files
-
KiddionsMod.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ