Kasu Optimization[.]exe | Triage

Sharing

General

Target

Kasu Optimization.exe
Size

3.7MB
MD5

bf14ee798c87f96ceb0b3decd0c03204
SHA1

595e7701c722c32442d225d056d0430f204e3af8
SHA256

1168991b1dcb2570ef91175e6fdacc60297621ae74a1304482e59f9ad6354bb9
SHA512

f524e9cd3129689d8102af443777b2373f55b136481a7660eddf6ea018959b81c374673297d0ff7a634de15284ffec195f3bbddc420aab3d7805d79905883b9d
SSDEEP

98304:dWPmhf/8FsqmvLNN0184EZuOybsnkHDJN3p1B:dX/ksTLv4GuHsnkjH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Kasu Optimization.exe

Files

Kasu Optimization.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\FBI ( John Smith )\source\repos\larp\larp\bin\Debug\CryptoObfuscator_Output\Kasu Optimization.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ