Static task
static1
Behavioral task
behavioral1
Sample
kythkkaewdth.exe
Resource
win7-20240903-en
General
-
Target
kythkkaewdth.exe
-
Size
1.3MB
-
MD5
1c0c000ecfad8fa57d732f81a30aa76f
-
SHA1
0021566536c370465140a630c4702eae5fda5e78
-
SHA256
f95645a33e5ecc3cf6c61a5121769995e2f50807fa48740c6bc02f745aa66195
-
SHA512
e94a9c7f2a4b306017dd6a01b684acf3b6ac6dca776b9eef3f6dcdec8d24f757331a22e620bed63bef759a59ea05ff92fc7c86521effa9cea269111845d88557
-
SSDEEP
24576:oCZZ2UpYQF+OIahGuffWJzIET30y1ew03AlZFge3yyklNhGW9VLCeCj2:oCZZZg8GuHWJEETFd1zFkJl/tdCf2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource kythkkaewdth.exe
Files
-
kythkkaewdth.exe.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 164KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 174KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 918KB - Virtual size: 920KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE