d:\workspace\Projects\KMC\StatusMonitor\release\KMPCT2M1.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a2969bbfb07a00cf24b680c982bd54e57ef275b8a94416a44b95121935e01744.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a2969bbfb07a00cf24b680c982bd54e57ef275b8a94416a44b95121935e01744.exe
Resource
win10v2004-20240412-en
General
-
Target
a2969bbfb07a00cf24b680c982bd54e57ef275b8a94416a44b95121935e01744
-
Size
521KB
-
MD5
89d2ea0d3280e6ecb1a712d5ba549bd5
-
SHA1
27567c26b9c7123f478557b9e3fd34ff2272d7d6
-
SHA256
a2969bbfb07a00cf24b680c982bd54e57ef275b8a94416a44b95121935e01744
-
SHA512
a03e5af5f00f1257352ec42a6713f8e428d5e84811d763ef1956ebd1cb42a32a6ad400add7dd4a79ad6e1cf095d917417db6188c0499c50461dbfaf1ebe4bb04
-
SSDEEP
6144:BTGEBCMfUmKBsJe8XLvYc1yqBV+UdvrEFp7hKik/:BTG2CMfUmKBR8JNBjvrEH7W/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2969bbfb07a00cf24b680c982bd54e57ef275b8a94416a44b95121935e01744
Files
-
a2969bbfb07a00cf24b680c982bd54e57ef275b8a94416a44b95121935e01744.exe windows:5 windows x86 arch:x86
29a004bad5e5e27f276e4a6ac6e1c271
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
ImageList_Draw
ImageList_Destroy
ImageList_LoadImageA
ord17
InitCommonControlsEx
PropertySheetA
kernel32
WriteFile
Sleep
CreateEventA
GetMailslotInfo
ReadFile
CreateFileW
CreateMailslotW
CreateThread
lstrcmpA
FindResourceA
FreeResource
LoadResource
SizeofResource
LockResource
OutputDebugStringA
GetProcessHeap
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
CreateFileA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
InitializeCriticalSectionAndSpinCount
LoadLibraryA
HeapReAlloc
VirtualAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
RtlUnwind
DeleteCriticalSection
SetEvent
WaitForSingleObject
MulDiv
GetLocaleInfoA
CloseHandle
GetLastError
MultiByteToWideChar
lstrlenA
CreateMutexW
GetModuleHandleA
SetHandleCount
SetFilePointer
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
RaiseException
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapSize
ExitProcess
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetStdHandle
EnterCriticalSection
LeaveCriticalSection
GetFileType
user32
EnableWindow
DestroyWindow
SetTimer
KillTimer
GetDesktopWindow
MessageBoxW
MoveWindow
FillRect
GetSysColor
LoadImageA
CheckRadioButton
IsWindowVisible
SetDlgItemTextA
SetWindowTextA
GetDlgItemInt
SendDlgItemMessageA
SetDlgItemInt
GetWindowTextA
GetDC
ReleaseDC
ScreenToClient
GetWindowRect
CreateDialogParamA
GetParent
LoadIconA
SetWindowLongA
GetWindowLongA
SetWindowPos
ShowWindow
SendMessageW
CallWindowProcA
EndPaint
BeginPaint
InvalidateRect
EndDialog
CheckDlgButton
IsDlgButtonChecked
SetWindowTextW
SendMessageA
GetDlgItem
PostMessageA
SetDlgItemTextW
gdi32
BitBlt
DeleteDC
SelectObject
CreateCompatibleDC
GetObjectA
CreateSolidBrush
GetDeviceCaps
DeleteObject
CreateFontW
winspool.drv
EnumPrintersW
Sections
.text Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 289KB - Virtual size: 289KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ