KyoceraAddressBookDecryptor[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

KyoceraAddressBookDecryptor.exe
Size

6KB
MD5

f455e0150ddcc178634281d00005a8c5
SHA1

72c54f2ae3da6c412021b47ba78ca2eb695b3198
SHA256

af081b54a95890721498ef29599cf1d15c814dfd01eb87a31fb3c54a5d199e61
SHA512

373904cb42e0d3853b34c5bc05d83998c6fb34dd5ca5414f4ab97a6f3479275e62de4ec602682d868caaea142f8daa08100968528cc218e6ea67b9d0ee25f104
SSDEEP

96:YS589y1y18udjWl+1fvUjEYW20AtXzNt:q8O8uJr1MwY1B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KyoceraAddressBookDecryptor.exe

Files

KyoceraAddressBookDecryptor.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ