KDAttendCtrlsLAN[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

KDAttendCtrlsLAN.exe
Size

213KB
MD5

125cd1e96badf56227cd9ef9813ecc19
SHA1

ce7b9b0c4881376c655d9ac9c87453d2ad8a4d98
SHA256

78d85e00565c5fb18c08ea88ce621bac3fc571b8f14490952b083b6c6c2bd5d5
SHA512

1f9a5ddc54b3bc37796f53973ebd4f340e3fed20ad19410fa0b4d4e2b32542626ffe7cbe937369dfad00ec56cfc0e0238f814b85959b5bf9485ac02fc4d01d6a
SSDEEP

3072:kN2wLnDLzbUW0osrz1e3fZT6DxI9xGHAS591:kown+jMfZuI90j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KDAttendCtrlsLAN.exe

Files

KDAttendCtrlsLAN.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 207KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ