Static task
static1
Behavioral task
behavioral1
Sample
Vulkan.exe
Resource
win10v2004-20231023-en
General
-
Target
Vulkan.exe
-
Size
28KB
-
MD5
481280e665df8ed0680ca7aecd2df457
-
SHA1
578fe87cbe52aa081d8180ca12bb7c2ff5d5b448
-
SHA256
b6d713942fa54c462d71606b687e5cabcd3754b37673639df77371be29e56b77
-
SHA512
3126741cc95bd0b2cb6675d59e0af35dcfca7f6b16d51a8525c67637a30603d44650a0198e0b5a829b1cb87f4a19d589e1acf10c6e5ff4b944a14ae7e66b19cd
-
SSDEEP
384:jBshUbC1c+9IIPdWBTRiekttMkeZ2dqEzQ0nc/KvGUl5wgCCCCCu+fHq:ChUydWBTRmMIdlBnlvGh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Vulkan.exe
Files
-
Vulkan.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ