kg[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

kg.exe
Size

949KB
MD5

34d97ec4516e89b98133e191e3238ecc
SHA1

c7f51d4dd9187507f2061606fdd29d3e8fd6f7f4
SHA256

39b5c1ed098eccf210527d5bacf408616867507cc8322474b40ff3ce29f43f95
SHA512

6de19951cf8382288791af34b89fa2c79f3059484f4aa1e47fbc7f7d7ef70996725ae84ebafeb0fe2c78ff06fdebf83930044693344d9fcd1f9f394fae47bb0d
SSDEEP

24576:QPAcyWaPCo9wSER074oBIdW88hHezP5q5z4:RTTqYjEiEoeWNd254

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
kg.exe

Files

kg.exe
.exe windows:5 windows x86 arch:x86

71bfd5484903034e881dceb32d47057e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

SetFocus

advapi32

RegSetValueExW

comctl32

ImageList_GetIcon

Sections

.gfids
Size: - Virtual size: 2.4MB

IMAGE_SCN_MEM_READ

BSS
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 70KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 102KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE