Static task
static1
Behavioral task
behavioral1
Sample
KPEdit-0.1.1-Setup.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
KPEdit-0.1.1-Setup.exe
Resource
win10v2004-20231025-en
General
-
Target
KPEdit-0.1.1-Setup.exe
-
Size
14.6MB
-
MD5
a8a7d672ce8adeb7bb6e3ea9fed6c91d
-
SHA1
fd4b8e7bbb382a7474ea8900b80e3e0fdc9d4709
-
SHA256
e9d374e095083b6cb887f38cecb2830d0bad294a89e5a4bcf4516c03868e9263
-
SHA512
6fc01d4b2b3896200f8db79585c40966b19cf970fa563b46bff74db7e8cfa3b488e78f82debebcd2cf98b994c0f289222092350b38c1c912548784f3de47e390
-
SSDEEP
393216:HB5SauyA0JbLjERagjS0dpwmHjrTCdVwoJyy7to0G:hNPYbpwycJyoo0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource KPEdit-0.1.1-Setup.exe
Files
-
KPEdit-0.1.1-Setup.exe.exe windows:4 windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 734KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE