Kinfe[.]exe | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

Kinfe.exe
Size

2.0MB
MD5

815359731b982b9a0f45a114a6c92985
SHA1

265b08fe19f6ee0a13c61bf641ed29a0e0e5de04
SHA256

4b06337d9af63c160e28a38973239fd29b70300e6080e61456ccd2e742e7043c
SHA512

37f384e589279d0f477c3d54e3ac4008b62e394255f9188bff04ed5a584743e5073e3b677ff556e70cb336de5eab8aec10733431058e08dc0d52d680251f39ee
SSDEEP

49152:tyVXt6YocLxWSKnDHou6LokzpXvD324CDl++sh:tyVdhoMWScDIRrvD32j8+4

Score

1^/10

Malware Config

Signatures

Files

Kinfe.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:82:27:81:16:ba:03:af:97:bb:3c:4b:c8:19:4d:83
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

11/09/2021, 00:00

Not After

07/09/2024, 23:59

Subject

CN=Exodus Movement Inc,O=Exodus Movement Inc,L=Omaha,ST=Nebraska,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

f1:b2:32:f5:60:61:f1:11:43:24:66:ff:0f:2e:87:8a:28:a6:fd:d2:c5:44:1e:76:6e:2a:b3:18:6b:8b:b7:b2
Signer

Actual PE Digest

f1:b2:32:f5:60:61:f1:11:43:24:66:ff:0f:2e:87:8a:28:a6:fd:d2:c5:44:1e:76:6e:2a:b3:18:6b:8b:b7:b2

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0b:82:27:81:16:ba:03:af:97:bb:3c:4b:c8:19:4d:83Certificate

Extended Key Usages

Key Usages

f1:b2:32:f5:60:61:f1:11:43:24:66:ff:0f:2e:87:8a:28:a6:fd:d2:c5:44:1e:76:6e:2a:b3:18:6b:8b:b7:b2Signer

Headers

File Characteristics

Imports

mscoree

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

.rsrc Size: 13KB - Virtual size: 13KB

.reloc Size: 512B - Virtual size: 12B

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0b:82:27:81:16:ba:03:af:97:bb:3c:4b:c8:19:4d:83
Certificate

f1:b2:32:f5:60:61:f1:11:43:24:66:ff:0f:2e:87:8a:28:a6:fd:d2:c5:44:1e:76:6e:2a:b3:18:6b:8b:b7:b2
Signer

.text
Size: 2.0MB - Virtual size: 2.0MB

.rsrc
Size: 13KB - Virtual size: 13KB

.reloc
Size: 512B - Virtual size: 12B