Static task
static1
Behavioral task
behavioral1
Sample
71bb28e1d8b1639c89c067a20a16e757a40bbf3e9c741f3febd94e4bafd43687.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
71bb28e1d8b1639c89c067a20a16e757a40bbf3e9c741f3febd94e4bafd43687.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Kkvmqrd.exe
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
Kkvmqrd.exe
Resource
win10v2004-20241007-en
General
-
Target
71bb28e1d8b1639c89c067a20a16e757a40bbf3e9c741f3febd94e4bafd43687
-
Size
1.3MB
-
MD5
b596dbab271c794a1f489016f26e7054
-
SHA1
1abfbde836084af314053d2b35d9d9ebd5158d16
-
SHA256
71bb28e1d8b1639c89c067a20a16e757a40bbf3e9c741f3febd94e4bafd43687
-
SHA512
018e2e0cfa3264f9a304d380e47575d487b60e9c0e6403757836d185a00ed389cc1ef59304a3854ecf1c334ac830614a67388cbfe9567915b66bf88d39e59497
-
SSDEEP
24576:V8wfpqPfh4YdQIuZ8VWDubUt8IlvWCOrBRqcFXqdy34FaWCwTqo:CSpqPfhJdQIuAWCeylFXqASmo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Kkvmqrd.exe
Files
-
71bb28e1d8b1639c89c067a20a16e757a40bbf3e9c741f3febd94e4bafd43687.zip .ps1 polyglot
-
ORDER P240026058910.img.iso
-
Kkvmqrd.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ