Kvwz.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fd4c0b3de5b83f28bc812f5058dc2d0b22770581181af73f64a9b33494e512a0.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fd4c0b3de5b83f28bc812f5058dc2d0b22770581181af73f64a9b33494e512a0.exe
Resource
win10v2004-20240802-en
General
-
Target
fd4c0b3de5b83f28bc812f5058dc2d0b22770581181af73f64a9b33494e512a0.exe
-
Size
839KB
-
MD5
30dc1edae820cbca5bdce10292ad7c51
-
SHA1
14b3743b49b0a1ba8156029e3c157704d9acdf48
-
SHA256
fd4c0b3de5b83f28bc812f5058dc2d0b22770581181af73f64a9b33494e512a0
-
SHA512
f8496fecb944c8c9cf06c72874c90225bb4471f0159179c8c8a272ea3eccb177060017bea98318aa811003f947ae11adffd9ce28b825e52abca1d1bea09aff3f
-
SSDEEP
12288:1qdBj0z1Oy1UoIG5MPU0wOqp0+mqQeUu5epT4lNn0YkAjr4Za4QGNxyWwm7SPV8:GiUobyTkpbGuAT47n0xAHQapxm7c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd4c0b3de5b83f28bc812f5058dc2d0b22770581181af73f64a9b33494e512a0.exe
Files
-
fd4c0b3de5b83f28bc812f5058dc2d0b22770581181af73f64a9b33494e512a0.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 835KB - Virtual size: 834KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ