kdmapper[.]exe | Triage™

Resubmissions

27/05/2024, 08:08

240527-j1msqsdc7s10

27/05/2024, 08:07

240527-jzze5seb97

Sharing

Copy URL Twitter E-mail

General

Target
kdmapper.exe
Size 213KB
Sample240527-j1msqsdc7s
SHA256 8b20f47382ac9fb608e568787d9d2974a3c3716bf56ba0208ef5599b19db4a1c
MD5 8b0bec71c0c9bfb67fc51cfeca662758
SHA1 aac11a7bcc44ac97f609375271d60b47d09764b6
SHA512 0e62b0c72caccdc35307bf9175c101ac3b1076f918db54605bad71097104befff8d818977401ed808bfc8b1abc56c8c5af243bc9fdc51ee4e8b50fb1bfbb25b8
SSDEEP 6144:tTsNwAJb5JrD89A32tvPHilDRfc8t0hVkPn:tAN9JFJrD89akvm9f5OVk
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
kdmapper.exe

File Explorer

kdmapper.exe

.exe 213KB

kdmapper.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 8b20f47382ac9fb608e568787d9d2974a3c3716bf56ba0208ef5599b19db4a1c
MD5 8b0bec71c0c9bfb67fc51cfeca662758
SHA1 aac11a7bcc44ac97f609375271d60b47d09764b6
SHA512 0e62b0c72caccdc35307bf9175c101ac3b1076f918db54605bad71097104befff8d818977401ed808bfc8b1abc56c8c5af243bc9fdc51ee4e8b50fb1bfbb25b8
SSDEEP 6144:tTsNwAJb5JrD89A32tvPHilDRfc8t0hVkPn:tAN9JFJrD89akvm9f5OVk
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

224046

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kdmapper.exe

mscoree

dotnet