KL-SA-013[.]exe | Triage

Sharing

General

Target

KL-SA-013.exe
Size

613KB
MD5

007f71d91f4355b6e74c2f75202d41b4
SHA1

0326e0e59f62eec772e6d9f7af0645d46326af4b
SHA256

dceba55af1e605a6d7a75e46bc2a0f15a8d33c980ee8f261cf78a8d7061f81b5
SHA512

0ab3982ff73b90b1c2a1e5f6e2fa46cc232ba96c258e9e6d39d5c05d5ad0c2a10b8795113b0c31df4069174d52bf3b8dbf0a905789ff05c71d6a74043aee673c
SSDEEP

12288:HIS17WINYe1xb4n0OAp+FOEhI3zXj9tZvBf4OJRYWqN:R1Tvq0OPFODf9tZvBgOJbU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KL-SA-013.exe

Files

KL-SA-013.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

nLHy.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 611KB - Virtual size: 610KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ