Static task
static1
Behavioral task
behavioral1
Sample
KosChecker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
KosChecker.exe
Resource
win10v2004-20240226-en
General
-
Target
KosChecker.exe
-
Size
541KB
-
MD5
6a3bcc6638fb9124113df73f58709b52
-
SHA1
e5b7254f3fd72f5106c37b6595f9985b27f38d9d
-
SHA256
e154c663d21a7248429ccdc9ade8c94fe4f64f54dae22273ee18bf99f3b0d640
-
SHA512
9e043239abdf04efbcf443cc1517b9d25df6535fa586a5af77fa05e03d54f0c2ff11616c483ce75839959049ee717fec6604aa9cf3ab2026a279b2a19cb1b89a
-
SSDEEP
1536:eDacQZN/f+54uVr2BstN/f+54uVr2Bs1jdWfa:eDacQPwUjdWfa
Malware Config
Signatures
Files
-
KosChecker.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
4b:9d:6b:a0:f5:24:d5:95:47:f5:45:35:69:82:fe:0bCertificate
IssuerCN=KOMPUTER\\snusoedNot Before24/11/2023, 15:23Not After23/11/2024, 21:23SubjectCN=KOMPUTER\\snusoedc9:e2:4f:68:39:42:a1:bb:37:d3:3c:7f:eb:82:a6:35:4b:fd:d6:69:29:b7:59:69:29:08:58:53:f7:2d:3e:1aSigner
Actual PE Digestc9:e2:4f:68:39:42:a1:bb:37:d3:3c:7f:eb:82:a6:35:4b:fd:d6:69:29:b7:59:69:29:08:58:53:f7:2d:3e:1aDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\snusoed\Desktop\c# projects\KosChecker\KosChecker\obj\Release\KosChecker.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 274KB - Virtual size: 273KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 265KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ