Static task
static1
Behavioral task
behavioral1
Sample
4cdc76cafe92e3bc879d4322452aa6e0N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4cdc76cafe92e3bc879d4322452aa6e0N.exe
Resource
win10v2004-20240709-en
General
-
Target
4cdc76cafe92e3bc879d4322452aa6e0N.exe
-
Size
122KB
-
MD5
4cdc76cafe92e3bc879d4322452aa6e0
-
SHA1
a4c0bce1b636782741568abcf25bacdcd96057d4
-
SHA256
c1d3a89699da1def2c0725d6439bbee7ab98acbc608719740147a22fd3e0c86f
-
SHA512
ea40642a06478a4e3250200d666482b88eba56b007a07d829d1ca714e55ad80dcd6a5892c682c5055ac75e1d79300d2809d7974be0682da509925cbef8fe87ce
-
SSDEEP
3072:7K69KiV7opsSrnQ4r8ah2FXnq4S6QSjgobkwCQYLaQ0wiApIauGckJayT6:7xV7opsSrnNr8s2FXzHMobkKoaQ3aL
Malware Config
Signatures
Files
-
4cdc76cafe92e3bc879d4322452aa6e0N.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
4d:3a:df:c3:85:62:b9:5c:0c:a9:ad:ce:b9:8e:9a:63:ff:93:f2:12Certificate
IssuerCN=goulash.tech,O=Goulash.tech,L=Yekaterinburg,ST=Sverdlovsk oblast,C=RUNot Before07/08/2023, 07:02Not After06/08/2033, 07:02SubjectCN=goulash.tech,OU=Codesign,O=Goulash.tech,L=Yekaterinburg,ST=Sverdlovsk oblast,C=RU79:2e:84:fe:2d:0d:ae:3d:af:3c:3e:3b:e4:4e:ff:7a:ba:34:53:c0:d2:8c:54:07:3e:94:50:b4:9a:7d:e9:72Signer
Actual PE Digest79:2e:84:fe:2d:0d:ae:3d:af:3c:3e:3b:e4:4e:ff:7a:ba:34:53:c0:d2:8c:54:07:3e:94:50:b4:9a:7d:e9:72Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\NewProjects\sushkof\kkmagent\KKMAgent\obj\Release\KKMAgent.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ