Static task
static1
Behavioral task
behavioral1
Sample
kellyaoh68951.exe
Resource
win7-20230712-en
General
-
Target
kellyaoh68951.exe
-
Size
475KB
-
MD5
f18c9b2d74d509dc6349ca5e5979ec4f
-
SHA1
de8f9e4a90099591e0d96a046b27826c39e0d32d
-
SHA256
ff3b8e65031237cfe633d28cca2519ec1b5c03abf8d6dec08333151e9d377bb5
-
SHA512
3498f42dfc42b75d85047eb9a3278255c586d98eed0e5c4a2599f6b4090c9f65f175c1d836d768ebb9f810483c8e870f6979d5291c94e2e84143e2a5d1ac6264
-
SSDEEP
12288:RSj//FExCNJRqYSL16n0MVKto0tm0gpSdI58:Mj1ExCNDXSL160hosO15
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource kellyaoh68951.exe
Files
-
kellyaoh68951.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 465KB - Virtual size: 464KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ