krutilka[.]exe | Triage

Sharing

General

Target

krutilka.exe
Size

284KB
MD5

9b7c249034a5e5ab4f3cdd45c42bf65f
SHA1

dd803910c9b65427bd658c859cc8b5a3bb5ffc2c
SHA256

60292e6be9d0d5e5f82a3382e4b69fcd19362b4c30a1829787dfc6ea5462a117
SHA512

a1948fe2afdb67937bc90f915bf877cba8984b9883c23a677c2022197516bc88465e4c52adc0a88850723c2c3439c07007aff3e29c1beebe7fbf7510ac7b6d20
SSDEEP

6144:IekEbFTBhqoJe4ixZVhXD7OsMq8Q2k9vlc0HvMziZ:IcBhqx4ixjhT8qj2k9i8vM2Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

krutilka.exe

Files

krutilka.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 281KB - Virtual size: 281KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ