KamiLib_Release[.]Free[.]2024[.]exe | Triage

Sharing

General

Target

KamiLib_Release.Free.2024.exe
Size

96.1MB
MD5

0f0d7c66b6b5432768b2c2cb4b5a5441
SHA1

9cb05c3155d3d6adc10a6527da06f0655cb86789
SHA256

089efc21429680f18c77d6e64cebd2d5884eed986c2f41442d7932ad1c0286a9
SHA512

3b40fa9c884b657cf7d823e676a233e0f19a9bbc1df8ef99e79d346d8c5d7bc755a359ba8fe87306132dd9dd9ca6eab7bab4386b4366a8ca0ea46c4079d520b6
SSDEEP

3145728:UD/al1bWhyIAKm4/CixAIhk94cYTn3TS3M:UD8cyIR/CiiN94cYK3

Score

3^/10

pyinstaller

Malware Config

Signatures

Detects Pyinstaller 1 IoCs

resource	yara_rule
sample	pyinstaller

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KamiLib_Release.Free.2024.exe

Files

KamiLib_Release.Free.2024.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Kami\Desktop\tool\KamiLib\KamiLib_Cheats\KamiLib_Cheats\obj\Release\KamiLib_Release.Free.2024.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 95.9MB - Virtual size: 95.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Stub.pyc