Static task
static1
Behavioral task
behavioral1
Sample
Kaspersky Trial Reset/Kaspersky TR.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Kaspersky Trial Reset/Kaspersky TR.exe
Resource
win10v2004-20231215-en
General
-
Target
4c9ab33b775a2c59e09d9ca5a63a227f
-
Size
147KB
-
MD5
4c9ab33b775a2c59e09d9ca5a63a227f
-
SHA1
5c1ec5e52db175dca14a47f6dccc0aeff0855614
-
SHA256
983647287a46dc1eb1e49e415de730cc341c310e002106826bd1274f7028653f
-
SHA512
4a88b7176d9004c6f2e937ad281af82414f61831f134a9c2f49bf820a5b941c30aca24c56933f2c18497c0db5d0c015978b7e17bf997b55edb3b0ac0ff5fdf45
-
SSDEEP
3072:/1Qj583BovgXoj+jx/hp+nWPxOExS1GYr7RZhe7zddW/xUmMNwGrhlerHvmYi9pV:/e83BoYXoSjlhp8KwEgGYr7RZgI/x3AF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Kaspersky Trial Reset/Kaspersky TR.exe
Files
-
4c9ab33b775a2c59e09d9ca5a63a227f.rar
-
Kaspersky Trial Reset/Kaspersky TR.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 355KB - Virtual size: 354KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Kaspersky Trial Reset/read me please.txt