Kangarooexe[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Kangarooexe.exe
Size

243KB
MD5

b9c0efd388c93d2134de01d8fdfce15f
SHA1

a8d2f7cebfed17dfaddff58e64cec7ca0140a76a
SHA256

d1cc31dfdc5fd02a504cdc3a155b7994bacf38c5ebcb4cdb332793200540dc11
SHA512

2db6bdba0377192c306ddaf6c74fb2c0a5c08c857cb27fbc0ef9b2c76834f6fcbe9d7a5f7f8eec9d98a1206fa82a7cef45ba728d6b2f970a462e80e4f55526de
SSDEEP

6144:/xnKyjWo7gB8eOCJG3FGJljXdQprzvEXaAMw0YYaZB6gkipk3mmw0eKggQfj:/xKsWR8FCw3wjXdQpv6aAMpQZtxTig5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Kangarooexe.exe

Files

Kangarooexe.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 238KB - Virtual size: 237KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ