kvrt0004[.]klq[.]unp | Triage

Resubmissions

05/02/2023, 18:37

230205-w9jtnaad67 8

05/02/2023, 18:31

230205-w549ssdg8s 8

05/02/2023, 17:12

230205-vq9ejaab93 8

Sharing

Copy URL Twitter E-mail

General

Target

kvrt0004.klq.unp
Size

537KB
MD5

91b18376763422b66e480613442500cc
SHA1

2ab01c91c5627a16c83c94020d7ecc4d47acacef
SHA256

ec5d7820cb33527fac77fb0775900c61a7795752d07d4f608e3e52bf3836d0a4
SHA512

bc1a6e334b7399b1b385994cb09587861c955fabf5a90b9689f1390dddc7407b05bbd3ba695dd2b8719de87d881856721cd3cedc0c362cdc422c279f5cf40a7c
SSDEEP

12288:rPOpUYyhMR1DGNH+nnnnnnnnnnnnnnnnnnnnnfbnnnnnnnnnnnnnnnnnnnnnnfm6:SyhM7y4DmlCK8J

Score

1^/10

Malware Config

Signatures

Files

kvrt0004.klq.unp
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 484KB - Virtual size: 483KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ