KianCallCenter[.]Service[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

KianCallCenter.Service.exe
Size

99KB
MD5

976d31cfa63b666188b965877e93835b
SHA1

82b9fa3689a6595cdcfa4d7b399892c4678b29a3
SHA256

5c41ee09a5ab62646598ae3937b9439bd9c19f3ac7c9ffc056b9ece722d3bcb7
SHA512

d682bc78ea1193219bcd905dbd8e7bea640ed34951077dfcabd26d30dc3a9ca23ce88f28fb629447850dbf372d79f1241cce587ef69ade5f9ac28faf7731116a
SSDEEP

1536:xM8+iQH1an70AQmWDDOqGPc49Iloj+gD+G9SRh5bpsna6DjQk5Kq5bw:xL+i7a3MH9I81DpArbGnFjTKq5bw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KianCallCenter.Service.exe

Files

KianCallCenter.Service.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\Source Codes\KianPardaz\Solutions\KianCallCenter\KianCallCenter.Service\obj\Debug\KianCallCenter.Service.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ