kaisersserversideiflestealer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

kaisersserversideiflestealer.exe
Size

120KB
MD5

f86d9f3c138fe7c49eec3e0174236672
SHA1

ce129296b2d0c2245c7dc62533cb4b6717066eb3
SHA256

115657238a99a984370e0d5912702a9280afefd4ecd3f9b218f76d8d93153588
SHA512

5f7032558bb4f6a9eca436fc6041fee0a9d5b92c6ca647978d628b86a9f11132f8fb44d341c5caa7dcd170f731a95ed35730bab233000bed741cce04789c8169
SSDEEP

3072:THfJyexKIQ9H12vjKi8m1yCV+fgBquoRw1bgcKKSThUkXElk8:bJy2a9HIvViYoW1bDzkm

Score

1^/10

Malware Config

Signatures

Files

kaisersserversideiflestealer.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ