Behavioral task
behavioral1
Sample
KrakenSpoofer.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
KrakenSpoofer.exe
Resource
win10v2004-20220901-en
General
-
Target
KrakenSpoofer.exe
-
Size
2.9MB
-
MD5
cb67de92635ea8ff2085e53e86871ead
-
SHA1
b2a6b91a416e07598c31569adda291c0af94afc7
-
SHA256
f51d1ca7f1a6c661163e82edc251210573c66338c1309eb4149e5e1289f43f5b
-
SHA512
f02e3fee9e3c14f12edd492e4bdae5cbcf5417f3c74a3a1965b7a3f2c21db0b71511a0dce76afd667a630ce21ca13c4b877a195fdab6f32d35abc513d23c43f3
-
SSDEEP
49152:wgFTGJe4crvMsQgOkAwCMAbUqBbRO2T0oH:Fq84EMMTG3Y2T00
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
KrakenSpoofer.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 34KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ