Static task
static1
Behavioral task
behavioral1
Sample
KVO2aqcU3IgpqHq.exe
Resource
win7-20240903-en
General
-
Target
KVO2aqcU3IgpqHq.exe
-
Size
716KB
-
MD5
3c15663abc554741be3de91a550ac0ae
-
SHA1
c815d1f6ec84ce3cc9ae098045032d01210f6584
-
SHA256
a898645f4029e742ca261f428c7985cb8c501586c48c35c06c4270c077833a9f
-
SHA512
87c093c07a976aba2a97c12d18c74925632abb0d8eb73442081e0f675437d180399a8e7e5da9533e3f4aafff858d4dc2d8872709c4bdbef16cb2da4fdc7d512c
-
SSDEEP
12288:0cir1S2IoOAc6/5rZGmy4OiGZno/ZX28j7xBDqtanEZgKHKL90S24sEmGq/sVXM3:diG9o13hUInE+KIsXJWXM2NtCmIe0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource KVO2aqcU3IgpqHq.exe
Files
-
KVO2aqcU3IgpqHq.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 714KB - Virtual size: 713KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ