Static task
static1
Behavioral task
behavioral1
Sample
kk.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
kk.exe
Resource
win10-20220812-en
Behavioral task
behavioral3
Sample
kk.exe
Resource
win10v2004-20220812-en
General
-
Target
kk.exe
-
Size
300.1MB
-
MD5
a8da494b9abc1a8dd5b0d74e6e750c1b
-
SHA1
3a5fef60157b60a10a4129096bb09541d5ada4d8
-
SHA256
7a7347d12a73ef81fa59a2be2b2ebd5071400984f5dcbc077b416377fe8b18cd
-
SHA512
3bd21205eaa2612db2a43f65087d90a48a369f48da5304f6d9d75e60d4b82a01f866df6e30ea71bb24f40760e9b29a39a98676350e866d22bda1327bf6fe492e
-
SSDEEP
384:qFYLS5778LEQA3Hus5rD/XgKy26KptYcFmVc03Ky:qec0RA3HHnf6+tYcFmVc6Ky
Malware Config
Signatures
Files
-
kk.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ