C:\Users\gg\source\repos\AutomationWorkshop4.0\AutomationWorkshop4.0\obj\Release\AutomationWorkshop4.0.pdb
Static task
static1
Behavioral task
behavioral1
Sample
kg.exe
Resource
win10-20240404-en
General
-
Target
kg.exe
-
Size
22KB
-
MD5
274ba58bfb05a0f7c5ef8efad86cbac0
-
SHA1
ea24c90b2c74f0c24e063ca210bbfd28d15e20d9
-
SHA256
6ac37736199f0c0f8f5f68b43582c1d1b31c55ada6c3343739c1d9a5aa07dfa5
-
SHA512
d2cf4a62b7aad254a1bbaaaf6eeea91009878745729e91cf96608bfc8285ddaf573b53ff5cd6c3dbf0db4e23dee1c2c617d453587168d935d5799966c69a1bf5
-
SSDEEP
384:+mlxB6vPhHxvzClWklw7+fXWfaFhg7x5I5SbwzMzXSFzoBz71UcstEZlZ9J9pOG8:Pe7pc5bo5YolrNZiQF8GA5Cdttvkl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource kg.exe
Files
-
kg.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ