Static task
static1
Behavioral task
behavioral1
Sample
KmdManager.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
KmdManager.exe
Resource
win10v2004-20240426-en
General
-
Target
KmdManager.exe
-
Size
22KB
-
MD5
bfe4bd635f49c2fbcc0b2d589fe638f6
-
SHA1
2ad0e599460771930e4af8f3c9a40f55677704bd
-
SHA256
2a2c04f4e851f437faf4d0ad61e0e60ce972a0a8fa496b715d22cb357b2ccc19
-
SHA512
f7bf4f81e9c294d14fd7878c63ce2cdc12d2380b5545b12739287fd3503e42f8d8553a6d5caeefd5301137c0334777a663215e3a7ff005f700e2b96c604fbb2a
-
SSDEEP
384:DEmXvsgjVDBdCdyWdyo/M2UNbgQjTgDJ+e9tJjomzjg:omX/jVDLOF0207EJ3Jjfzjg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource KmdManager.exe
Files
-
KmdManager.exe.exe windows:4 windows x86 arch:x86
bbd9eae9b45958cb985d8e03c29adb92
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TrackPopupMenu
SetWindowTextA
SetWindowLongA
SendMessageA
SendDlgItemMessageA
ScreenToClient
OpenClipboard
MoveWindow
MessageBoxA
LoadIconA
IsClipboardFormatAvailable
GetWindowTextA
GetWindowRect
GetWindowLongA
GetDlgItem
GetClipboardData
GetClassNameA
GetAsyncKeyState
EnumChildWindows
EndDialog
EnableWindow
DialogBoxParamA
CreatePopupMenu
CloseClipboard
CallWindowProcA
AppendMenuA
wsprintfA
kernel32
DeviceIoControl
ExitProcess
lstrlenA
lstrcpyA
lstrcmpiA
SetCurrentDirectoryA
RtlZeroMemory
HeapFree
HeapAlloc
GlobalUnlock
GlobalLock
GetVersion
GetProcessHeap
GetProcAddress
GetModuleHandleA
GetLastError
GetCurrentDirectoryA
CloseHandle
CreateFileA
FormatMessageA
advapi32
OpenServiceA
ControlService
CreateServiceA
DeleteService
StartServiceA
CloseServiceHandle
OpenSCManagerA
comdlg32
GetOpenFileNameA
shell32
DragQueryFileA
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 360B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE