2024-06-09_6f986b79733a93cfb51265074c9974e4_krakencryptor | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-09_6f986b79733a93cfb51265074c9974e4_krakencryptor
Size

727KB
MD5

6f986b79733a93cfb51265074c9974e4
SHA1

24799a4f60f95cd99d88eb9de6e43e18755f840e
SHA256

5f21f61927d258fd011859c42e7cae7c55ccf35aec153591e8cac08765aa62fd
SHA512

1ddea86aa6b20e2ab2e41890229914d9ca2b369e87d0ca4694aab076f25502bd495cae74f5100d99a6c7a242b6cc2d0635caa6d72ddfc2741bb4717bb29d60b5
SSDEEP

6144:zgDmn5VfyTXv22eCH0RzLJ8NpyV9jxGTlx09JMngYMBQz2ez2zGUlOOWvXQT2gbe:bfmUFlWJgbKZeHQvw1v8H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-09_6f986b79733a93cfb51265074c9974e4_krakencryptor

Files

2024-06-09_6f986b79733a93cfb51265074c9974e4_krakencryptor
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\OlivierNaudet\Source\Repos\VoiceManConnect_FirstGen\VoiceManConnect\obj\Release\KörberOneVoiceConnect.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 679KB - Virtual size: 679KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ