Static task
static1
Behavioral task
behavioral1
Sample
069395ba2c278a8d5fe946e6414c3b028d04e906a166055c0d88c8ef6baebacf.exe
Resource
win7-20230712-en
General
-
Target
099dafcf699c37adf990bf7926580917.bin
-
Size
32KB
-
MD5
40d429fe1d404c0970a6ae2fff9554ab
-
SHA1
f927092c375576a7ea724571b258efdd504b70a7
-
SHA256
6a9c1fb2457f92f1e593dae3ff0d164a07576b8528cb95340fc0d9f6cc43a88a
-
SHA512
e513d421d6f5f98ba6f07fa91113a83e43ce9ebfc99629205bc2f7a620eb23124b66e98fcba36730d0506734155ab75e1f9bd7b1c4be38ced155fbdaa48b7bf2
-
SSDEEP
768:YnbGi8e1L77y/cXNcxpZmI+N6C+LRwhz7NLhQqKG02la:4bYexJdcbZ6RKRwh7rOG02la
Malware Config
Signatures
-
family_kraken 1 IoCs
resource yara_rule static1/unpack001/069395ba2c278a8d5fe946e6414c3b028d04e906a166055c0d88c8ef6baebacf.exe family_kraken -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/069395ba2c278a8d5fe946e6414c3b028d04e906a166055c0d88c8ef6baebacf.exe
Files
-
099dafcf699c37adf990bf7926580917.bin.zip
Password: infected
-
069395ba2c278a8d5fe946e6414c3b028d04e906a166055c0d88c8ef6baebacf.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ