Static task
static1
Behavioral task
behavioral1
Sample
CTK_20220722.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
CTK_20220722.exe
Resource
win10v2004-20230703-en
General
-
Target
CTK_20220722.exe
-
Size
251KB
-
MD5
f14f6eaf06061f2c2c3927c7c2dfe906
-
SHA1
d121b8bd4ae6b9ea926c8bf6971cea1dc1e3d02a
-
SHA256
d831902212cbc98fca379bfeb435cfcc8fa0a1de64b61ed6a6cd05ff6e1a1675
-
SHA512
93c501637e0a49334a14568446b3cbbd402abc9b3f887aa1119a6c2507abf6677373dd602e784424c74ebde8221385bb81971e803a292d62b329b354f6bda01b
-
SSDEEP
6144:HjSinXfwLWpbhTnapBsRVFDGnrkF/xPZ1zbOCwot7A:2i9ZPDA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource CTK_20220722.exe
Files
-
CTK_20220722.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 237KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ