KapishLauncher[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

KapishLauncher.exe
Size

730KB
MD5

6b0a7aeb4ea133dcffdc661179ff5fec
SHA1

7932f611ada0fc52663864e64dcb1e9caa8c031c
SHA256

3cd124bc851e398022eb0efcf82a35dca8c50d4471c3b5f4273b3039cc3c5128
SHA512

c558a779e846b783ee7097a3588d519fb3e6deee1aee952eaf7d25edc5b02f4bb3adfeaa005d988fc97da4e940991063d1cf346a36fe7b0af538be7e808e2827
SSDEEP

12288:seywJbj3quPoR1GytQQu0bnCPhgeQ4DHfA9WyFot2wkda7E:sIRquPoGyO22Je4DHfA9WyFoBkkA

Score

1^/10

Malware Config

Signatures

Files

KapishLauncher.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 724KB - Virtual size: 723KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ