KkExp6A[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

KkExp6A.exe
Size

22KB
MD5

5262261ec2b17f4d0d4085f6806de39d
SHA1

a9b70b852923635e7921bce0294d53bcb5e17bb5
SHA256

1b2c5e1a5fbcedc630c93482d9fd49562a5a6e90496de84343ce723e3011c6f5
SHA512

85abcc34c7222b8f3bacebc27455001f726293b12f3af128ab6a778f63988516a9d161b9c14658a70f4404e926dace464ebf9f1a3ea77423b36f59172f4f1184
SSDEEP

384:LkN00rwjqyCOOajIAaEZhMEI2HI9JV7wD:h0rHOOajn42HIH1w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KkExp6A.exe

Files

KkExp6A.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Emma\source\repos\AccountManager\AccountManager\obj\Release\AccountManager.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ