DragonKMS v23[.]05[.]26[.]exe | Triage

Sharing

General

Target

DragonKMS v23.05.26.exe
Size

684KB
MD5

be2b108f96afe013562efd65b18c5ae7
SHA1

6f7b559c26ba9aa1fdec6cfa207df3543805c24d
SHA256

b7175b1b214e756a41e53e153112f0edcf7995c85a1de4ab7a7f3831dfece11d
SHA512

ae3e889dc0dc8eca4c0065b63b75a114e36e47378a0ec11a86cbff75040097549234f05d54a4faa6cdf9915d62076c79dbc1314bfdbc7aa9ad5b4a01ad2c280f
SSDEEP

3072:0ii21OqrjuAphexHexHexHexHex5exvLu:0B21OqxQQQQY+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DragonKMS v23.05.26.exe

Files

DragonKMS v23.05.26.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\VS\DragonKMS\DragonKMS\obj\Release\DragonKMS.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 582KB - Virtual size: 581KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ