KsDumper11[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

KsDumper11.exe
Size

77KB
MD5

2f5f3f5d678591d55db3ed8906a1e75c
SHA1

b86c38589a8fdfc01ad30658636207caa65f6388
SHA256

8ded55af1ba89d1482be56d537e27d154fa8ff0a2e63be87489537988e8c8020
SHA512

6012fc7d961e7f74b2fac6960e5632af925fa7f2af940674dba1673fdb08ae20066e0b9e2c41babfa132a86a83e9ed92cd60ee7b62cfd6e0883b599e2508eb9c
SSDEEP

1536:eerWiaH0nrhTjRNWbhX6Sx8FeXQFeX3FeXFWd:eerWmfRNWbhX6Sx8FxFuF1d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KsDumper11.exe

Files

KsDumper11.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Devtop1\source\repos\KsDumper-11_GIT_REPO\KsDumper11\obj\x64\Release\KsDumper11.pdb

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ