0eef67dbee8912b9267f7ca7f7eb4f63547bc8d336bdddc22f98c14563c32515 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0eef67dbee8912b9267f7ca7f7eb4f63547bc8d336bdddc22f98c14563c32515
Size

80KB
MD5

a8a2e3100a56c891b16cd7503e4b03ae
SHA1

e5313848436433842b4d932e3ddfc408bb20337a
SHA256

0eef67dbee8912b9267f7ca7f7eb4f63547bc8d336bdddc22f98c14563c32515
SHA512

e84237a1605ae4bc4caa8e94398a45a4347d47466c30633f237a14cb5b5a9995a3944e268ec4e9b6dcf8f374eebeea14a84678da8f5fa6645829fe41098544d5
SSDEEP

1536:6mcODmuU/nqPPjLXFC6ihgDHXwivg8v8Pp9bLYmxQwTW:rZdPjLX4DgDHXwCggA9omx5TW

Score

10^/10

Malware Config

Signatures

family_kraken 1 IoCs

resource	yara_rule
sample	family_kraken

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0eef67dbee8912b9267f7ca7f7eb4f63547bc8d336bdddc22f98c14563c32515

Files

0eef67dbee8912b9267f7ca7f7eb4f63547bc8d336bdddc22f98c14563c32515
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ