CTK[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CTK.exe
Size

240KB
MD5

f217a175dd1c26deaecf9a4d2036284b
SHA1

a781730dbd1c343c3865db60990ab65bf999397b
SHA256

75ceee3ecf83b1228ce8eebf073870d9b6f34803348ee3db1e46fd571e63d5c2
SHA512

9c9d288b0b0d7bffeef7b54a8694d460ec393fccf4717ae910e998c8b1e4e4bfacd4500c99cc76123beb8a33c06332fd3685db1aa201129e79143ce91af10135
SSDEEP

3072:o4jnrec1SX+8AQK/aaR9s6eYeichcYyhfqrjNn6DUX2b9V8/bqIaIv7VeEXRIhuh:o4LpSXnA6a0He8aUX2b9Vzjgp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CTK.exe

Files

CTK.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 225KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ