InventoryKamera[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

InventoryKamera.exe
Size

466KB
MD5

9a398bd7d9cac662ab9ea373e48d487e
SHA1

3cca24088ac5c7d87254b43078a825f576072d9c
SHA256

6c50b5cfa48871bde0d35a554368bec4b14d6c40b920015e124d337279aaf2e0
SHA512

c64bc48ccda0f1163e7cade90a2f49929b4b7f7c44e4e9e7af1dcb14705dea0e0fb4412effd49a2bf97f57bdde75c7f75855745bc7dd6641f4af8e60aea3440a
SSDEEP

6144:Lz/fpiR3gHSS1mUrslxa8R87EF9cxk87EF9cxon:Vmok4xk4o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
InventoryKamera.exe

Files

InventoryKamera.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 323KB - Virtual size: 322KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ