Static task
static1
Behavioral task
behavioral1
Sample
Kinky Daddy.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
Kinky Daddy.exe
Resource
win10v2004-20240508-en
General
-
Target
Kinky Daddy.exe
-
Size
6.4MB
-
MD5
6c1314451b1cd4c0238506be925348f5
-
SHA1
e48dfb63ff30038a69f28dc11d91ca41da18c087
-
SHA256
52514b60ad9dda523421f4b012c8651fd4e601f0ab04c242910de16206decef3
-
SHA512
6c25c69c329297cbe4470069c9071b6a1a4f536fb07176637c266f4e7a14f612f641ba0a28b5e2b0e8447d8f6cd649c698008ce2dd15e52dd500e88e78231940
-
SSDEEP
196608:k7fyIVZiDaSH90ugQJSGg/oBNtKMyq5OsTnC:CfTVA2SH90ugQJlaoC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Kinky Daddy.exe
Files
-
Kinky Daddy.exe.exe windows:6 windows x86 arch:x86
3e2c4962d77c3da28c908afbd442b5f3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetWindowRect
CharUpperBuffW
advapi32
CreateServiceA
msvcp140
??1_Lockit@std@@QAE@XZ
vcruntime140
__current_exception
api-ms-win-crt-runtime-l1-1-0
_initialize_narrow_environment
api-ms-win-crt-stdio-l1-1-0
_set_fmode
api-ms-win-crt-heap-l1-1-0
_callnewh
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Pz7 Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.(j- Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.R<( Size: 6.3MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ