Static task
static1
Behavioral task
behavioral1
Sample
krFw3oRJO4.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
krFw3oRJO4.exe
Resource
win10v2004-20230621-en
General
-
Target
krFw3oRJO4.exe
-
Size
12KB
-
MD5
0a2e3935d3fcb95d231d8a0741e0f3b3
-
SHA1
954f049e20e1a4f3cc9b5bd6337a6841c32fa3fb
-
SHA256
f7367fa6849a9ce278a014bd39f5d93d74102c9735d85a410d2bce4eacef9b8a
-
SHA512
9196aa5569b3ab8145a58b38c2fc4a38b9de2b3eab62e03ac1a709f890a8f93f96a2b823b12ab10382f0e21c102abca40d39f4f46655e428ee460399c8f08126
-
SSDEEP
192:/qwFkb7H0rKTW2eOFAZPuyD3kepn+6XR5V87W1tfjt9q3fJdW16myRRW3ZD/VQVF:7UTcOFYPuL6XRSsZ0sHhzVQVF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource krFw3oRJO4.exe
Files
-
krFw3oRJO4.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ