zhkg.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e0c7a974ee35a0e9410cee3e9bf9e0f6d265e14064449db9e288da4d92e7b447.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e0c7a974ee35a0e9410cee3e9bf9e0f6d265e14064449db9e288da4d92e7b447.exe
Resource
win10v2004-20240508-en
General
-
Target
e0c7a974ee35a0e9410cee3e9bf9e0f6d265e14064449db9e288da4d92e7b447.exe
-
Size
713KB
-
MD5
edcce91324050def7e045bb06be5e0e2
-
SHA1
0568091db913a7d94aa0f79390971c62ee860714
-
SHA256
e0c7a974ee35a0e9410cee3e9bf9e0f6d265e14064449db9e288da4d92e7b447
-
SHA512
6c8a6204991e758bfb9de695408e3605658d7c9f57dff90188a48f005c2c617432555194a5b2e54baa6f554fc210b688d4f04ae4f98fb894168b0b9188c37cde
-
SSDEEP
12288:9bBPJwKcI0rhsSlsK2SBcLhP+dJUGMYuo2m1qp1H1FWYj2B/VUi4mAmv10i:ZBhcbradKZChINCoXuFWYjg9x10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0c7a974ee35a0e9410cee3e9bf9e0f6d265e14064449db9e288da4d92e7b447.exe
Files
-
e0c7a974ee35a0e9410cee3e9bf9e0f6d265e14064449db9e288da4d92e7b447.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 710KB - Virtual size: 710KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ