Static task
static1
Behavioral task
behavioral1
Sample
kkrieger/pno0001.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
kkrieger/pno0001.exe
Resource
win10v2004-20230220-en
General
-
Target
kkrieger-Chapter-1_Win_EN.zip
-
Size
98KB
-
MD5
0ce278c26d21f89c47075867e6f1ec1f
-
SHA1
bd4896560fc6beb088a6323646204b2333a2bb77
-
SHA256
a21d301699fb3e3b885b30ce92d28c475a62744032d84ce40617be4075bb1395
-
SHA512
81115001c163cd3cc14b406c5c1444d89288e35cc95e6002bd18edb74be062aa6124b063da340b6c8a2e1b40dfd367fe31d8242302c5f2bad194c0a4d688fdea
-
SSDEEP
3072:New4eVoG6+Jjes44dytCFlmK/7MCZOAxR4sR:0wb6+Jjp7dFfzoAf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/kkrieger/pno0001.exe
Files
-
kkrieger-Chapter-1_Win_EN.zip.zip
Password: 123
-
kkrieger/pno0001.exe.exe windows x86
Password: 123
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 94KB - Virtual size: 13.0MB
-
kkrieger/readme.txt