KmkO.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ba6ca59893666207fcc985056f408e08b82a09e6938a746edb2e769dc47d6ba7.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ba6ca59893666207fcc985056f408e08b82a09e6938a746edb2e769dc47d6ba7.exe
Resource
win10v2004-20240412-en
General
-
Target
0f9d3f2e7e70b89cb6ff99273f5eebd0ad41298830b56f89a4c8a8cb96ddba2c
-
Size
617KB
-
MD5
6fc0f4c89170ec596e7f7fcc2c83464e
-
SHA1
9c0e13125459351a3dfd736d127721f93cc9d46e
-
SHA256
0f9d3f2e7e70b89cb6ff99273f5eebd0ad41298830b56f89a4c8a8cb96ddba2c
-
SHA512
425e2a67738dfc8cb1b837b25d534888a6b409dec7bce4670e3ac148e70959f7935cb79720e317f2ec2fb2adff30e7ed7e5d5b8b3423cd438fd8187156f1de0b
-
SSDEEP
12288:wvAca64MSSDREulHUimwZPcdKheHrz3bELgyeJSuI+Oa:Ka2SS9EulHUihcdKIrfEPuJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ba6ca59893666207fcc985056f408e08b82a09e6938a746edb2e769dc47d6ba7.exe
Files
-
0f9d3f2e7e70b89cb6ff99273f5eebd0ad41298830b56f89a4c8a8cb96ddba2c.zip
Password: infected
-
ba6ca59893666207fcc985056f408e08b82a09e6938a746edb2e769dc47d6ba7.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 625KB - Virtual size: 625KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ