KrabHacks[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

KrabHacks.exe
Size

15.7MB
MD5

10e0c53d15d2c80627b279e0e1ebb050
SHA1

420525285a7b5bb92bc762fe4bec872fc64b4f61
SHA256

1be7dbc6cf87a9dc2a28ecbcb928be5454bf94198c3e684ebc48407cd85c01db
SHA512

86e3ccb129eb6a026f164b7be67246df6a21dc06ea971ecbe792908b905789f453f19da8d589b282fcef66c6d2c9b712a8bf655747a4a3d30cb197552a0e7c09
SSDEEP

196608:PZXXg82nJ45/9iD54+V11bFv4z9ZXXg8i/vdJxDlWxYFATIObIT:Phw8S0hw8indnwxsUI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KrabHacks.exe

Files

KrabHacks.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Admin\Desktop\CGHM-External-UI-master\Mr. Krabs\obj\Release\Mr.Krabs.pdb

Sections

.text
Size: 15.6MB - Virtual size: 15.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ