ktHT.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4dc955deb0b17a54cc123e89f66bca5d6467dcc66b869bd14e6954691a991bc7.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4dc955deb0b17a54cc123e89f66bca5d6467dcc66b869bd14e6954691a991bc7.exe
Resource
win10v2004-20240426-en
General
-
Target
4dc955deb0b17a54cc123e89f66bca5d6467dcc66b869bd14e6954691a991bc7.exe
-
Size
732KB
-
MD5
f36b7dab63ada64e8b27a5d1c06cc157
-
SHA1
d6d509f3dc57ae1c63b26aa363f17d1710e3bfb5
-
SHA256
4dc955deb0b17a54cc123e89f66bca5d6467dcc66b869bd14e6954691a991bc7
-
SHA512
57fd6e36939edb4f652714bd70ab5d8ae49640c8370ff79595a7599674f4de6ff9a5680c17eeff89c65186216e17a76508578981e55dc9065a9f21302a3fe1c3
-
SSDEEP
12288:Y0GKt/rFfaM67qoronLTvOEjmlYoyG/uWdAC/fduVwKI7+ikJ:0KN5irvUnL1voyG/uWdAwKh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4dc955deb0b17a54cc123e89f66bca5d6467dcc66b869bd14e6954691a991bc7.exe
Files
-
4dc955deb0b17a54cc123e89f66bca5d6467dcc66b869bd14e6954691a991bc7.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 730KB - Virtual size: 729KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ