70a787b2b0d59b8abf14019f674fbc70e9e2d01b6ed844821d9708ebd3c3ce4e.bin.zip
- SHA256 70a787b2b0d59b8abf14019f674fbc70e9e2d01b6ed844821d9708ebd3c3ce4e
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
KL.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
KL.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
10 signatures
150 seconds
General
- Target 70a787b2b0d59b8abf14019f674fbc70e9e2d01b6ed844821d9708ebd3c3ce4e.bin.zip
- Size 25KB
- Sample261002-gfxfbsstbs
- SHA256 70a787b2b0d59b8abf14019f674fbc70e9e2d01b6ed844821d9708ebd3c3ce4e
- MD5 bd444162648f1cc04e666fd25b7f498c
- SHA1 e8b5a7083057ac9f52db7bc5e02e877b06cb951f
- SHA512 b19420e82300fb935409d27bdd6fbda2d3e8991f38751c967ef8e844cde834b27c31377adac4eb7c4fbfdb343c893cbcd4fc4495010614bd8d43fa5ea7dac139
- SSDEEP 384:eKnyVVNQTGO4z+ICskTCsPF3HuvH+IxpBP6qtnAGOCLd6EyzrniLpG1mUhYpR:e1VYKnkTBieQxvzrLd/yaLpG1mUhYT
- TLSH T17AB2E181EFF1EBB1CDEEDBF81E5288256C0459A0AE74C21D974A490230BDF54612FE48
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/KL.exe
File Explorer
-
70a787b2b0d59b8abf14019f674fbc70e9e2d01b6ed844821d9708ebd3c3ce4e.bin.zip.zip 25KB
-
KL.exe.exe 58KB
KL.exe
- IMPHASH 96a4dba83b8afa0bb61cf566ced74cd8
- SHA256 f51ecc147223a00881b9e32bf8eb8fc11599769ee4ea6c9778472cb4bc112612
- MD5 c35505f86c532265f99660d3f0b2edd0
- SHA1 d80e04723f3af40c4f014091644e73d4f9e8afed
- SHA512 fe2c57e38f3af3811009787d3e12e1961dee2941e853cdb632da670a3fe45aeddcf18396717649365499d3505dd473c6b2dac6d391f1097c766289a64b668917
- SSDEEP 768:bbWOODD5PRwDB7Q0rMtJy0lk4acbckXu2rZ4W:baOOtoQiMtDG4n4kzZ4W
- TLSH T1E3432A99B74940DBCEE5D3BCD0BE8330DB60BC2001297A7A6E80D7595D74ACEB919F42
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5184
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
CreateProcessA
DeleteCriticalSection
EnterCriticalSection
FindResourceA
GetEnvironmentVariableA
GetLastError
GetProcessHeap
GetStartupInfoA
HeapAlloc
HeapFree
InitializeCriticalSection
IsDBCSLeadByte
LeaveCriticalSection
LoadResource
LockResource
SetUnhandledExceptionFilter
SizeofResource
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WriteFile
msvcrt
_XcptFilter
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_commode
_exit
_fmode
_initterm
abort
atexit
calloc
exit
fflush
fprintf
free
malloc
memcpy
setvbuf
strlen
strncmp
vfprintf
ws2_32
WSACleanup
WSAStartup
closesocket
connect
freeaddrinfo
getaddrinfo
recv
send
socket
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
208B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
648B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
436B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
384B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
39KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
108B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ