Static task
static1
Behavioral task
behavioral1
Sample
Konst.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
Konst.exe
Resource
win10v2004-20231127-en
General
-
Target
Konst.exe
-
Size
15.3MB
-
MD5
cb031980eb0030f7096b5e097e841a87
-
SHA1
7d1b8a56ed0fa8b367605ed3b909cbfe2f9f017d
-
SHA256
15399042016065429443742d3638917dffec34e0ae6921d4b10ba9b5c2bf4353
-
SHA512
a57ad511b35d84b598b4b221615cced0cfa2c8eeceb770d235f500ea4d5ffccc6fd670b246a19c38f0bd215f2eb9994b485027f1e453b96ad02d2e4c74cfc7e9
-
SSDEEP
196608:usTThnGlMNmviSDpnol5grgEvAzR6X08FCncKyDwl7aUDwyrcvUNcID3U:/lncMNkiionogQTF4Rp1cvYcI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Konst.exe
Files
-
Konst.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 15.0MB - Virtual size: 15.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 278KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ