Static task
static1
Behavioral task
behavioral1
Sample
Vtfkhc.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Vtfkhc.exe
Resource
win10v2004-20240802-en
General
-
Target
a822f72eef9c985e6bac0168766a3889dcbf93dd7b903d101d7b10b69e2cec59
-
Size
1.6MB
-
MD5
c2a592ca7aebb275301ed87d76fedc08
-
SHA1
4e51ff0e0665a4a0fb11669994235f82df536fde
-
SHA256
a822f72eef9c985e6bac0168766a3889dcbf93dd7b903d101d7b10b69e2cec59
-
SHA512
0ed379bd712e1c3c7783de1719fb278c97a22efa2ef134a67589a100a27fc77b0154a3eff0ff0badc21c19c01c1a88f12276655208e32b0be57f038af4c2860e
-
SSDEEP
49152:vaMj6tqrw5/CYRTTPs+nMFJRrNUvA6tggb:N6Mw5FRTTUgaRratr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack003/Vtfkhc.exe
Files
-
a822f72eef9c985e6bac0168766a3889dcbf93dd7b903d101d7b10b69e2cec59.zip
-
SKM_66034153994.docx.iso
-
out.iso.iso
-
Vtfkhc.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ