CKRK[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CKRK.exe
Size

314KB
MD5

970414a45a368316b4a94337e4209e37
SHA1

3826dfad73fdafac0d7df321f8dd08af547cc695
SHA256

ff97d9704e92b3f4015a4a1593de85d1a79149d743d423143c29dde4e378ca94
SHA512

69399100e9eff9ee893485f0b360742bb2758a6e768fc138d2928cca58e3f0e3072b44e93afc781bab2227f3c06ae249a8292f9bd942744780c5fc3d5f045b25
SSDEEP

3072:rFF2s1e0+iJhonOegeEpZCeQPZw1k3icC+LT70ULZqzo28FHHlcl2WpwTB5tkgK2:rQ0/zUml2Wp6xYcfmQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CKRK.exe

Files

CKRK.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 309KB - Virtual size: 309KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ