Static task
static1
Behavioral task
behavioral1
Sample
kabetuma2.exe
Resource
win10-20240404-en
General
-
Target
kabetuma2.exe
-
Size
541KB
-
MD5
67162eaa423cc43c31dd4a85e8569a80
-
SHA1
4251efde5b04a6057975af4b7c18f11645a4f574
-
SHA256
506b78bd55c491ba97796598de52a8c9faab9e62930ff0f5c0350e59d32aa016
-
SHA512
e7638e201891eb90416580f74c8fc1b5d96a74b6f330a81dce89472d68af4ac3c38a26b977c843968cd6df8b7ec77ec27f4d1c1989bd599721a94e93cc85b00d
-
SSDEEP
12288:V/Su1+eTSHIVZKFjyOXL75qrwIADcHBYIikFyK5zX1XC2/z32dwq:VqFGmIVZ6jGrwIADCLP2dwq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource kabetuma2.exe
Files
-
kabetuma2.exe.exe windows:5 windows x86 arch:x86
64ef3eb32847e1d7d5afae4cb070ef10
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
GetDC
gdi32
TextOutA
shell32
ShellExecuteA
ole32
CoInitialize
winmm
timeGetTime
setupapi
SetupDiGetClassDevsA
hid
HidD_GetHidGuid
dsound
ord11
d3d9
Direct3DCreate9
d3dx9_42
D3DXCreateTexture
imm32
ImmAssociateContext
emotedriver
?EmoteFilterTexture@@YAXPAEKP6AX0K@Z@Z
Sections
.MPRESS1 Size: 257KB - Virtual size: 125.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 279KB - Virtual size: 279KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE