Static task
static1
Behavioral task
behavioral1
Sample
5922855fb22f461cc67e90ddd40091a0ea49595dc656d1acc938f23d42fd7a94.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
5922855fb22f461cc67e90ddd40091a0ea49595dc656d1acc938f23d42fd7a94.exe
Resource
win10v2004-20230220-en
General
-
Target
5922855fb22f461cc67e90ddd40091a0ea49595dc656d1acc938f23d42fd7a94
-
Size
80KB
-
MD5
02f630bd197a94ac24badae6c183756c
-
SHA1
e635466d561d248f8048f5887f4c4d451b0f988f
-
SHA256
5922855fb22f461cc67e90ddd40091a0ea49595dc656d1acc938f23d42fd7a94
-
SHA512
72514182d61d5b5e878a95c79269c9988fe2bec21d3d32bc1a5d921370732bab1802d90fbcc5cde4f9e77da739eba40892dfcccc96aec8dbeab803c878d05fd0
-
SSDEEP
1536:smO+7ax6fzbn1sTfA3oHpRivgg1XU8kp9bLY/xQwyL:prNfzbnl3oHpRCggqr9o/x5yL
Malware Config
Signatures
-
family_kraken 1 IoCs
resource yara_rule sample family_kraken -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5922855fb22f461cc67e90ddd40091a0ea49595dc656d1acc938f23d42fd7a94
Files
-
5922855fb22f461cc67e90ddd40091a0ea49595dc656d1acc938f23d42fd7a94.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ