Behavioral task
behavioral1
Sample
KTNE.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
KTNE.exe
Resource
win10v2004-20230220-en
General
-
Target
KTNE.exe
-
Size
63.7MB
-
MD5
cf719e6de02adfeb8b50f7ecee35ccf9
-
SHA1
3da4fc1ffbf2b7c4c045b6e87b567c86b846dab2
-
SHA256
4db4d30b24a7fe1504ccc3bbd6eda776f446016f57a8d4680f9123561a94bb49
-
SHA512
83d8dea2df5a8cb19d3d45f93fb65f578b4c677a167f702b7720fb7b4866d0446c04c642d4d92c3333e26df29b0f7e5c6db0ea3cb3a4123d49dd708ee7af8c36
-
SSDEEP
1572864:8hH8rTI314adjf+olgYjfloYO5qhzhT27ZKrhKx:+CTwW2fyMf+7whz12700x
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
KTNE.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE