KbUI.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b264d23c08e569cfb116398ba9b68da55c929a0450795a1194c296cc307b4d65.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b264d23c08e569cfb116398ba9b68da55c929a0450795a1194c296cc307b4d65.exe
Resource
win10v2004-20240802-en
General
-
Target
f652bc01dbf92b470782f3be94b4597d47dace5c2fc32750d0c145fa3cffe7f6
-
Size
18.1MB
-
MD5
76847e889a4f08d12ab8f8c793e31b07
-
SHA1
d8723e677ba39d07a261fecac64eede880ed8812
-
SHA256
f652bc01dbf92b470782f3be94b4597d47dace5c2fc32750d0c145fa3cffe7f6
-
SHA512
4ced1fb9284c3a0b6ecf4c67f91c50ced3b89ffbcb45935d9bdaee6a18dc34ce06602b03596bd68c84b3047bdd64e58ea45b0da94f4a80a15aef927909dee20d
-
SSDEEP
393216:zpHnu9zuNQw1fPpzTp0TeX0C8CwdQklwxREDZKqBw6kCjPk8nZ:zF4aV1Htw80+2lyrEDZK1CY8Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b264d23c08e569cfb116398ba9b68da55c929a0450795a1194c296cc307b4d65.exe
Files
-
f652bc01dbf92b470782f3be94b4597d47dace5c2fc32750d0c145fa3cffe7f6.zip
Password: infected
-
b264d23c08e569cfb116398ba9b68da55c929a0450795a1194c296cc307b4d65.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16.8MB - Virtual size: 16.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ