qANP.pdb
Static task
static1
Behavioral task
behavioral1
Sample
KALIANDRA SETYATAMA_24000000120887000033208 'dır. PO 1310098007.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
KALIANDRA SETYATAMA_24000000120887000033208 'dır. PO 1310098007.exe
Resource
win10v2004-20240508-en
General
-
Target
KALIANDRA SETYATAMA_24000000120887000033208 'dır. PO 1310098007.exe
-
Size
750KB
-
MD5
9aa4f5ddf5c95f873c450bfa6eda7bc5
-
SHA1
d88dc6dcee8758da7fa4b1073c599263cae47a02
-
SHA256
8b24f9264224b13cc905e35f60131be2e46b206bf3fec9e2018596eb648a37e2
-
SHA512
3c9bd6a4691950e96f648b43f9e3dbde1f8c6c48b3ccfebe0f5fcf74e18926e23fc9c8dee9c10f79dfc1f6675950dbc13758da9445d1b0db2d0e226ce101cc72
-
SSDEEP
12288:CN2iNPyCK2xrOoOGVlxxEbVK5boT4HeoKCbFG4Tt0xSFf1uHV623+Hv1PKWysb:415yC5Ocxd7+odbk4Tt0xS1U6Ty
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource KALIANDRA SETYATAMA_24000000120887000033208 'dır. PO 1310098007.exe
Files
-
KALIANDRA SETYATAMA_24000000120887000033208 'dır. PO 1310098007.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 743KB - Virtual size: 743KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ