Static task
static1
Behavioral task
behavioral1
Sample
kyexe.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
kyexe.exe
Resource
win10v2004-20230703-en
General
-
Target
kyexe.exe
-
Size
14KB
-
MD5
07ed3d5054a563578b865ff67547c426
-
SHA1
bcd69255b0a87dabaab77c29652d0666ed57d625
-
SHA256
aa107280fbb36bec454a977fa1ce1b5589e1587bad37cc12cd3f21e34b409db8
-
SHA512
55021d45ff6c0537bd7b50ef24a98fd03c1c308a377f10955ba830071d91d92add3429b6db2e195e1858867eccc3b457317811658e3ab91683c9e64f4fdb7779
-
SSDEEP
192:b6V7TAChxFtXBko6vhcRUM2yxD9tFT2YXasXZB9zuDZWJrkVOIsGF:aACnnxkPcJ205vT2YqkSDEJrkVvl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource kyexe.exe
Files
-
kyexe.exe.exe windows x86
0cc3310e89c342e19e31564b4f2dda90
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateDirectoryA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetCommandLineA
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
TlsGetValue
VirtualProtect
VirtualQuery
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
calloc
exit
fclose
fopen
free
fseek
fwrite
localtime
memcpy
memset
printf
putchar
signal
strcmp
strcpy
strftime
strlen
time
vfprintf
user32
CallNextHookEx
DispatchMessageA
GetForegroundWindow
GetKeyNameTextA
GetKeyState
GetKeyboardLayout
GetMessageA
GetWindowTextA
MapVirtualKeyA
SetWindowsHookExA
TranslateMessage
UnhookWindowsHookEx
VkKeyScanA
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 916B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eh_fram Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE