ckan[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ckan.exe
Size

5.7MB
MD5

cb274c712a93ef8916827245d5980ff0
SHA1

2fdabb5c7b99f61c866840810ae4cff34bfa9875
SHA256

1489ddc51c860e05e29cff195f4a3a2c426018d370f38b423f0e45755014dd32
SHA512

9735a9696401ff85b73440903c632982f18b1fa7c73243c235b52af8f45f94f60552e2f1d63ae1dcaa96c8bb3946e1be6ca9f3d854dc6beac62638c416b68e50
SSDEEP

49152:kgcHunU06t7f7p5EvDxsKEZTh8N9WxtBo5vm2NSoiLo7eOBsGEOuqgNQ+o9GbU:kgcHunUvr5EvDDVdBga

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ckan.exe

Files

ckan.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 400KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ