NkaH.pdb
Static task
static1
Behavioral task
behavioral1
Sample
804f3ccbd3049e7a1b08b2a21a2f0fc54980a8bee9e722f9820f93719799069f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
804f3ccbd3049e7a1b08b2a21a2f0fc54980a8bee9e722f9820f93719799069f.exe
Resource
win10v2004-20240508-en
General
-
Target
804f3ccbd3049e7a1b08b2a21a2f0fc54980a8bee9e722f9820f93719799069f.exe
-
Size
709KB
-
MD5
1dd1f578e5b023c4e35a97de33372d51
-
SHA1
87885ce15d262c9b96da71a493018ca8fa4e849b
-
SHA256
804f3ccbd3049e7a1b08b2a21a2f0fc54980a8bee9e722f9820f93719799069f
-
SHA512
c9b3d6a24fe9b5a62ba091c2dca5b15f7ea54905f9e1144e3bde8c6bfdd817d9e6af62e72efd6f78b9c4cd5fa0ecd34c16b61648e469b1b1ffc1f3fc85d1148e
-
SSDEEP
12288:ZY1irDYrhy/7sfaWnTP6RiVQmz5XVKOG7RKo5Fa3Ozou83q:ayYrhTfp0WARKYFa+Eu9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 804f3ccbd3049e7a1b08b2a21a2f0fc54980a8bee9e722f9820f93719799069f.exe
Files
-
804f3ccbd3049e7a1b08b2a21a2f0fc54980a8bee9e722f9820f93719799069f.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 699KB - Virtual size: 699KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ