Static task
static1
Behavioral task
behavioral1
Sample
2024-09-21_edbe8b93f67f591f7e18d2516e3cad98_kovter.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-21_edbe8b93f67f591f7e18d2516e3cad98_kovter.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-21_edbe8b93f67f591f7e18d2516e3cad98_kovter
-
Size
1.4MB
-
MD5
edbe8b93f67f591f7e18d2516e3cad98
-
SHA1
366b81abc84cdc9e4a60b0eb9a689341ac2ffa6e
-
SHA256
e4189d08e501e7d8e1dcf2d8ce5b990a023f06660c8e0a440f8fd2d637d8854a
-
SHA512
04937b52ea0488564c9a0e95f9b92365a8a465f9aa0b6d567b5e89112c0ed2134d40948474e94bb8d5c1e1f43f43657f1a40471604357b109c3bcdfafd9cd48e
-
SSDEEP
12288:4idiMkoe70sAt6TFamh+sdZB1r0bLpwjjp6d+ewEjauq5lqwQ8mST4biTDYqOUGB:41J11+6cfjuumu3ofL3CaERloK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-21_edbe8b93f67f591f7e18d2516e3cad98_kovter
Files
-
2024-09-21_edbe8b93f67f591f7e18d2516e3cad98_kovter.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 983KB - Virtual size: 983KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 423KB - Virtual size: 423KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ