kBRlT832sTW10xL[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

kBRlT832sTW10xL.exe
Size

734KB
MD5

2bdfe72452d2c47e9aad6eec291a1c06
SHA1

ad0d78374dd9d5ffb0ba385700d1b18e261834cd
SHA256

1bce8b3e6c21478a929c90f262e557fc2bb8848818c11a93b791603dbec72856
SHA512

3c4863dc4aa469a0d2e63cdbae79159d7d93bca5531200b7403f98e8aa0f1a6be626da8a971992a3f949b9140babf9a56fa5402783d6b4112400e695c65556a2
SSDEEP

12288:F3qyJM9UgCYqUY1dltYEmCqrqW0BvqBDME4kC0cku8ElNmRs:F6OWCYqxYEnTW0BmN/ckH2ks

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
kBRlT832sTW10xL.exe

Files

kBRlT832sTW10xL.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 722KB - Virtual size: 721KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ