Behavioral task
behavioral1
Sample
kiddy.exe
Resource
win10v2004-20231023-en
General
-
Target
kiddy.exe
-
Size
9.2MB
-
MD5
26a4a6e6819617ba579317b96afa23ff
-
SHA1
249b580afe9d9cc9673dba10b7dba45b13e0b8ef
-
SHA256
e84bb0d2d6c6068f6494d85c00b71dbb67c6063c2fae37c543bae454890b4ac5
-
SHA512
005c1559e2ec4e9d99e86dc88394263ee033f3fc40d0b4ab068ddc4162c2ac7bfe114c18111b04e1524a66dce3e1672122999339142447c4fe2d3590ad12a4c1
-
SSDEEP
196608:VKsr+lTjDwUuSgix+ddtgAjUx3bu//OxhdMUdv2RlxoC6zOFkUu:VB8DwUuhCAAJbA/OdMxRqSLu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource kiddy.exe
Files
-
kiddy.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 4.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8.9MB - Virtual size: 8.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 265KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE