KaFHq[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

KaFHq.bin
Size

356KB
MD5

5dcd663c4ae448007834612fa96ad323
SHA1

052ae3a0fbc29d6148fb9b8b76ac388b40f85b34
SHA256

0e49b1ed3ebf91af2c30e883125625f5f6028706b909021975acd705fb5a8c79
SHA512

8091eb2a820c5cf6eb89843e60de7c79da81c2d136e5f6fb0d212c069923ed12f61b5d448eb416f3f7091f059225a40e3a9e92a244f99d58e4b00efd169b1f74
SSDEEP

6144:89eKlA0Eus4UNYdegcxdYdNcACGwNPaxFBVZdTjTetpE4qIK9Okb:89tAOUh/xdYXcACGIPuF3TetO/tO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KaFHq.bin

Files

KaFHq.bin
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 353KB - Virtual size: 353KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ