c:\users\ut0045\my_it_applications\raph\2\krbuacbypass-master\KRBUACBypass\bin\Release\KRBUACBypass.pdb
Static task
static1
Behavioral task
behavioral1
Sample
k.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
k.exe
Resource
win10v2004-20240802-en
General
-
Target
k.exe
-
Size
697KB
-
MD5
752f05a0a08c56aa94a46ac211c979d3
-
SHA1
8f589180e6e8c5b7cccdd9979cc7c8b048f7bcf7
-
SHA256
17b64344fed82d137eac802de090199a2d9c69f6a9b53d77a98f4792b678cdd0
-
SHA512
7efa7e8bb52150c4e7a2ce756b09cb41434af7c66c7fd7b6435bca21e441a8d23e405d84032db666061c7411f4a4129645e8f3a84555197acdd98c3391e7bf57
-
SSDEEP
12288:q0fYYgnCeKjvjSzL/C1NN+1WhYtyDaFbNui02rc7Wv62zT:MMeO6zmNg/v6+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource k.exe
Files
-
k.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 695KB - Virtual size: 694KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ