Behavioral task
behavioral1
Sample
HKTWLogin.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
HKTWLogin.exe
Resource
win10v2004-20230220-en
General
-
Target
HKTWLogin.exe
-
Size
3.6MB
-
MD5
40f09f01f4acd270c89b1ebcd8faae48
-
SHA1
88d3d46ca43bf7374a15d209b22ae668952de5d2
-
SHA256
8f97eb74d7b316d462f1ea032941c659a451372b0f84a36916b539f8da244589
-
SHA512
3b35118beffaa63e646d1f0200f63af6812fa660a149e60ad283555328a4a97fdb5abae32bec7cfa1fe4f28bbf781c6071b1a60893e4225969c3d20dd49d82b3
-
SSDEEP
98304:JvJ/DoTrKM+drakdX4L4ak5f0XqpNgWyDhQdF2Vd2h:JvJbCoFRp4MZ5qqpSWghQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HKTWLogin.exe
Files
-
HKTWLogin.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 14.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 256KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE