D:\bs\main\Out\Win32\Release\starter.pdb
Static task
static1
Behavioral task
behavioral1
Sample
KAV19.0.0.1088_ru-RU_full.exe
Resource
win11-20240802-en
General
-
Target
KAV19.0.0.1088_ru-RU_full.exe
-
Size
154.4MB
-
MD5
2f47d389f45402721c64b37c33be2613
-
SHA1
7ce02f2e1fb32a7d249fbcb644e43bd6c4aa0793
-
SHA256
a9c8fd41239558c5a1aff3237cbc68ef1761ee8afb7cdb7896d95c1bf993c034
-
SHA512
a238d04942b47b04b0258c965f44487f4ade9cf18647662cd733e071a48036b6207b75e993cafa2b76fe77ab85dc5ccaf4045ffb311bfab1f6c3bf8dbf52c627
-
SSDEEP
3145728:DP7lr5vspujkUYZQQsYKiX0N5YjisENFwr1l8H5G00qzdKz1aNro:DPZiAj3Y6QKcJEE1li5y0dKzclo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource KAV19.0.0.1088_ru-RU_full.exe
Files
-
KAV19.0.0.1088_ru-RU_full.exe.exe windows:5 windows x86 arch:x86
4103e6dbeb8141ce5069ecaf9931d0e4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
WaitForSingleObject
CreateEventW
SetEvent
CloseHandle
ResetEvent
DeleteCriticalSection
LocalAlloc
OpenProcess
DeleteFileW
RemoveDirectoryW
GetModuleFileNameW
GetLastError
GetCurrentProcessId
CreateProcessW
CreateFileW
ReadFile
FormatMessageW
ExpandEnvironmentStringsW
GetModuleHandleW
GetTempPathW
GetFileAttributesW
CreateDirectoryW
SetCurrentDirectoryW
LoadLibraryExW
GetProcAddress
FreeLibrary
HeapFree
GetProcessHeap
MultiByteToWideChar
GetSystemDirectoryW
GetSystemWow64DirectoryW
GetModuleHandleA
GetCurrentProcess
GetCurrentDirectoryW
MoveFileW
HeapAlloc
GetLocalTime
GetCurrentThreadId
SetUnhandledExceptionFilter
CompareStringW
LoadLibraryW
SetLastError
TlsSetValue
VirtualProtect
VirtualAlloc
TlsAlloc
GetVersionExA
GetSystemInfo
FlushInstructionCache
TlsGetValue
TlsFree
GetTickCount
VirtualQuery
RaiseException
LoadLibraryExA
FindResourceExW
LoadResource
LockResource
SizeofResource
WriteFile
SetFilePointer
FindNextFileW
FindClose
MoveFileExW
GetTempFileNameW
WideCharToMultiByte
GetStringTypeW
EncodePointer
DecodePointer
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
LCMapStringW
GetLocaleInfoW
GetCPInfo
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
InitializeSListHead
RtlUnwind
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
HeapReAlloc
GetStdHandle
GetACP
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
HeapSize
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
WriteConsoleW
Sections
.text Size: 182KB - Virtual size: 182KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 1024B - Virtual size: 552B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 154.1MB - Virtual size: 154.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ