kill[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

kill.exe
Size

37KB
MD5

ef7384d25791b91a8bdfbd76eb61db53
SHA1

4411a76f6588c509a5f58730d70b214f3fee9133
SHA256

4e4e5d379bdd3288e92a7351e5ab9edc0843e218bb255404bfb1e13d498cc1f5
SHA512

922c8b9ca4b237e6230888c43850d26f78257a9f30526b7585a4fc4fcef100bf0d05044e360727d3f0dbddd216e39b7e71edf9fb0b9f11e45e2d51d8d07563b6
SSDEEP

768:MEaZ8Jv2OTXvZR2KpC1dzY//mZ0u5UNpwBKQQqozqfy:7aZ8JPXSQQImZPUDwcXqoey

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
kill.exe

Files

kill.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ