03afbeab4776160c5d50682e87b7f76a8b1e81d54e16383e148830b65cc59b13 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03afbeab4776160c5d50682e87b7f76a8b1e81d54e16383e148830b65cc59b13
Size

1.4MB
MD5

a6e5a8b529ef8c59af1976a0bcaea668
SHA1

e4025efc7dc90419cb5e102164597140c6649607
SHA256

03afbeab4776160c5d50682e87b7f76a8b1e81d54e16383e148830b65cc59b13
SHA512

643aa81360b9297fd203c7601151e0087bf753d99624a12d7f3ff1a8c7f6bc3c5f2250c541218bf4099e6ffb269880438a697aa97b01612ab761e3e59af0e6d2
SSDEEP

24576:xfRkhkeYVG/6VCUswnTab/WIiq3jmang9h2dE:RegG/6Tswmb/13jfg9k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03afbeab4776160c5d50682e87b7f76a8b1e81d54e16383e148830b65cc59b13

Files

03afbeab4776160c5d50682e87b7f76a8b1e81d54e16383e148830b65cc59b13
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Utente\Desktop\KMS Auto v2 - ROBKEST\KMS Auto v2 - ROBKEST\obj\x64\Release\KMS Auto v2 - ROBKEST.pdb

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ