H[.]K cupbord[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

H.K cupbord.exe
Size

711KB
MD5

198914f04413915d3d58a5f34b405891
SHA1

abcdf8eac1b0e93b01d6c5a737f32ef4f584b533
SHA256

e5a75ed3a164d322279af143c007028a5e94a52c11e4fa674c37a48c79237d27
SHA512

49802f742bdcd95621bb1247add6d7ead397dc804a47ba94c7e79995f3c5f837045bb4506616ea757ce450ba1e46c7ad12d11e7e0be0fd522ea2804f0bbb6459
SSDEEP

12288:qaWIm6lVvtzZBEP85HTM49TRAGb+Bw4jVfwuTgMgWd17kJRSg7JTFb4nhMX5:zTmIt9BEP8VM7BTZwuBVg7JTFk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
H.K cupbord.exe

Files

H.K cupbord.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 700KB - Virtual size: 699KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ