Static task
static1
Behavioral task
behavioral1
Sample
kellyzx.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
kellyzx.exe
Resource
win10v2004-20221111-en
General
-
Target
kellyzx.exe
-
Size
723KB
-
MD5
40666fd3604c7b342b2afcdbc1e0730c
-
SHA1
3e5c0ffe42c98213996834019be65e9c107e9387
-
SHA256
0d98a179bd6affe49d2aede0bb1db2709c1a0419f6c51dd79867974744bc7c44
-
SHA512
c22369380ebbca65cb7248a62eeb8c5549e89145a6c7a94af929a250d02e3f064b77ccdbf57ac88407f3f0163d59d7a336feafafb4cdf85dc57ef2ea0ad4b36f
-
SSDEEP
12288:o/awHRr/CB06KuLp93bv6IAkMZQHvidfW14OJK7FrO/2obDDlG:o/awxO5dIZZQ2ezA0/9Z
Malware Config
Signatures
Files
-
kellyzx.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 720KB - Virtual size: 720KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ