Static task
static1
Behavioral task
behavioral1
Sample
Knight Rider.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Knight Rider.exe
Resource
win10v2004-20221111-en
General
-
Target
Knight Rider.exe
-
Size
2.4MB
-
MD5
c406977bfb5734fe0352a54698607068
-
SHA1
2ee2a2ae708ca3e6d07c783c7d3a1310429daca3
-
SHA256
9e33daf894ab90dc04772f87d860506fbb9b87d37c4c736d50bc5ec0e83776f9
-
SHA512
202f5f9e9bb2256eb45929866afc1763fcda086bf3f4c69175e27f9900471ad3c88eb618763aca5b5dafc62574031b8e3d5f599832c944618f02a68ff681d341
-
SSDEEP
49152:NQtUAeLnz/ep44kEfwvSf8l5zxe4tfrQTA1L+9MW:NQmLnz/GsAw68lVxe4t
Malware Config
Signatures
Files
-
Knight Rider.exe.exe windows x86
c578c185dfd211ee55bc16ea518d27c3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadCursorA
DestroyWindow
ShowCursor
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
PeekMessageA
RegisterClassA
SetCursor
LoadIconA
MoveWindow
GetWindowRect
GetClientRect
SendMessageA
SendDlgItemMessageA
SetWindowTextA
EndDialog
DialogBoxIndirectParamA
GetWindowLongA
IsWindow
DefWindowProcA
CreateWindowExA
UpdateWindow
ShowWindow
AdjustWindowRect
PostMessageA
EndPaint
BeginPaint
PostQuitMessage
GetKeyboardLayout
ToAsciiEx
MapVirtualKeyExA
GetKeyboardState
SetKeyboardState
MessageBoxA
ClientToScreen
mss32
_AIL_close_3D_listener@4
_AIL_set_file_callbacks@16
_AIL_open_3D_listener@4
_AIL_set_3D_provider_preference@12
_AIL_open_digital_driver@16
_AIL_startup@0
_AIL_set_redist_directory@4
_AIL_shutdown@0
_AIL_close_digital_driver@4
_AIL_sample_status@4
_AIL_close_3D_provider@4
_AIL_set_3D_velocity_vector@16
_AIL_set_3D_position@16
_AIL_set_3D_orientation@28
_AIL_set_3D_speaker_type@8
_AIL_3D_room_type@4
_AIL_open_3D_provider@4
_AIL_open_filter@8
_AIL_enumerate_filters@12
_AIL_enumerate_3D_providers@12
_AIL_set_3D_room_type@8
_AIL_allocate_sample_handle@4
_AIL_allocate_3D_sample_handle@4
_AIL_release_sample_handle@4
_AIL_release_3D_sample_handle@4
_AIL_start_sample@4
_AIL_set_sample_loop_count@8
_AIL_set_sample_file@12
_AIL_init_sample@4
_AIL_stop_sample@4
_AIL_set_sample_volume@8
_AIL_set_sample_playback_rate@8
_AIL_WAV_info@8
_AIL_start_3D_sample@4
_AIL_set_3D_sample_loop_count@8
_AIL_set_3D_sample_info@8
_AIL_stop_3D_sample@4
_AIL_set_3D_sample_volume@8
_AIL_set_3D_sample_playback_rate@8
_AIL_set_3D_sample_effects_level@8
_AIL_3D_sample_status@4
_AIL_set_3D_sample_distances@12
_AIL_set_named_sample_file@20
_AIL_mem_alloc_lock@4
_AIL_mem_free_lock@4
_AIL_decompress_ASI@24
_AIL_file_size@4
_AIL_file_read@8
_AIL_process_digital_audio@24
_AIL_size_processed_digital_audio@16
_AIL_set_DirectSound_HWND@8
comctl32
InitCommonControlsEx
kernel32
GetCommandLineA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
QueryPerformanceCounter
DeleteFileA
IsBadReadPtr
GetModuleFileNameA
HeapFree
HeapAlloc
GetFileAttributesA
QueryPerformanceFrequency
CreateDirectoryA
GetStartupInfoA
GetVersion
ExitProcess
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
SetFileAttributesA
HeapSize
HeapReAlloc
GetProcAddress
TerminateProcess
GetCurrentProcess
OutputDebugStringA
GetLastError
LoadLibraryA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
WriteFile
LCMapStringA
LCMapStringW
CloseHandle
GetCPInfo
GetACP
GetOEMCP
ReadFile
SetFilePointer
SetUnhandledExceptionFilter
FlushFileBuffers
IsBadCodePtr
GetStringTypeA
GetStringTypeW
SetStdHandle
CreateFileA
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
RaiseException
ole32
CoCreateInstance
CoInitialize
gdi32
GetStockObject
winmm
timeGetTime
dinput
DirectInputCreateA
ddraw
DirectDrawEnumerateA
Sections
.text Size: 2.1MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 164KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE