jkfw.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4ee06ed334e98fe42fe34b41e528397a22f370bf165d40e07dbd6a2b6d88014d.exe
Resource
win7-20240221-en
General
-
Target
4ee06ed334e98fe42fe34b41e528397a22f370bf165d40e07dbd6a2b6d88014d.exe
-
Size
619KB
-
MD5
17888a2c90547f557c1f88877d7353e0
-
SHA1
582760951fd4418ec3f949ab5d55a53ce578203d
-
SHA256
4ee06ed334e98fe42fe34b41e528397a22f370bf165d40e07dbd6a2b6d88014d
-
SHA512
cfe1ecc5b4e011e0f1281568519dbaf6b8b9bb73bd1a8d8fbc8547c2a846a24a2f7ccc273d182a086136c3689674fe74b1784717bcf094504e95fc4f4d67ca1d
-
SSDEEP
12288:iw2iN3skSKSIwpdj6kxlApT9NUYzKoXKMXPK6QD0GD7k0nVXB:iw19JSNIAdLL0WwhX8dvB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 4ee06ed334e98fe42fe34b41e528397a22f370bf165d40e07dbd6a2b6d88014d.exe
Files
-
4ee06ed334e98fe42fe34b41e528397a22f370bf165d40e07dbd6a2b6d88014d.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 550KB - Virtual size: 550KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ