f11af2747b596d673a9d898cf423e40cc50ea356bb52f796a1f5b3d38d58ff87 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f11af2747b596d673a9d898cf423e40cc50ea356bb52f796a1f5b3d38d58ff87
Size

185KB
MD5

806ba0897668e5d8e47a9362fc6184ee
SHA1

701afd104b96114ec9ca95d95ff544ac177e5e21
SHA256

f11af2747b596d673a9d898cf423e40cc50ea356bb52f796a1f5b3d38d58ff87
SHA512

45322a08eb8e31e8cd154369347a0dc163dece49e2d1d272cd81f0d3c49274d05fe9a9cfa48e9adc303d083014a3cc6a04209065aba9e074fcc72d3266028d21
SSDEEP

3072:PUbbtoycB3ytbfViI8E6DE2Ukgv4hNtSsbeP08CebvSVgR7sVaSAq0hvL:kz47+2rgds6P08CmS6s4D1vL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/NewKp.exe

Files

f11af2747b596d673a9d898cf423e40cc50ea356bb52f796a1f5b3d38d58ff87
.zip
NewKp.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 466KB - Virtual size: 466KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ