kill[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

kill.exe
Size

9KB
MD5

8e69e4b5a0c599a11f1566f68bca2cc0
SHA1

1d4365b4affea30de4cfef713aa4494713656d2f
SHA256

61a23e0ce51e9d769d3cfa43fe32e38b00de96c63a7a598b1dcac2c79a5dfe81
SHA512

869deb506772dcb040caef478e1b45a88dd2a37abbe1b959a3d7ddddac3d34287bae5126c958f4f99a5ff23a47f38d020fe4eae2a051bc20f086225516b35e09
SSDEEP

96:CZchxSPAI/nCpAAzsZOJyhvEy49IUptokvlV89R7gS3rPUAyZL8y7u6m2:Qu4PFnCpAAzf+vwOKs7P3rMA36m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
kill.exe

Files

kill.exe
.exe windows:4 windows x86 arch:x86

5a498eee87e4d89512a84502f500181f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

Sections

.text
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE