kalem[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

kalem.exe
Size

92KB
MD5

37062fedef66e106a3c266c8a4e6e696
SHA1

b8e67d1325ed4ce03b6a8ccf641b9847dbd58e04
SHA256

9aac2b276672cf4c003544b368362418ffe9b41f553d23e33cb70f496f6af875
SHA512

d075f08f4cb99b638c552c015ab6401b8d602d767d082738cf0bf6a461c82284611910d616c54137aa0ee8b4998fa8b8ef629eaa28a9361454777e576d89f0cf
SSDEEP

1536:DksLmYsTpff5GjvWA2Bw0X8TctzP75Hs5BFLmpNkMFYPDQWbT:D0pGrWA2BwnTctzj5HSFLmpWYYPDQ+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
kalem.exe

Files

kalem.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ