General

  • Target

    kankan.exe

  • Size

    4.1MB

  • MD5

    9783b9b2a25b77e3fb239a170262ff9b

  • SHA1

    b7121d0c2d7d84a4a11b9bcfcfad03e3772305a5

  • SHA256

    b74cd5f3c73e29b8fbf67381133ebf9c2bd10b7c3078a453f23d48d37d45999d

  • SHA512

    9f231b05a5800f69c43b374e71daafba24483f6fad1d393a46bdac0c01d0ed8c49bd790e5149fbafca65eeb93b18f036c1a78233b855d32a6b3ebed883384abf

  • SSDEEP

    98304:bSqYYuwkOS+jOuy7DQG6Dy10Sip9qESn3Lp9:mqYwkOSMOZ7MzDyE9U3T

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • kankan.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections