Krampus V1[.]0[.]2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Krampus V1.0.2.exe
Size

7.6MB
MD5

3cb00c8a98199dcb1c5a0b67be4e1e27
SHA1

65fe71a52df8602b2196bc4026d24e0970b98114
SHA256

ebf65bfd72fe64e4ac2db423f3a208c15a23bda3b2a6e7fc87c35f5edcc7c124
SHA512

d1c074dde7fccb73a4ef78c6a228496c17e012806dca77d67cdb6ce07f655f7a88d328873abcd68fee60cd7f2864e1342f27c980c28dce6a9ba272683b06c510
SSDEEP

98304:0Sc0SbSMt+dnz8JjHWxJHRLIHzcrmpliRYOeTjcIJ1IlhlWu8hK87N7Ceg6H0AEd:lMt+dnIdHWxdKHoYOeXRihlWu8YgoPj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Krampus V1.0.2.exe

Files

Krampus V1.0.2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7.4MB - Virtual size: 7.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ