04u5rx[.]raw[.]krak[.]bin[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04u5rx.raw.krak.bin.exe
Size

2.0MB
MD5

d7a81a20f0ec53a440a94d93aeab87ff
SHA1

c508178fef3f60a4fb3d7aa3a5c967c17602e14a
SHA256

30b50177fee0fb53f49d90c645ff69b87faadf65a187b084165b9b522b4fc8ff
SHA512

9860c9f22a18004217b485987c8ab232fc4876eb7391aaa993ebb0dfed4524dc64ff16772294a4cce2844430d3da791b6bcfa66ac0a7612c4790bc82439ff9f7
SSDEEP

12288:CBwaiGSkK/Lsaj0feAFAkFnarY09hK0yjpK9yiausjdwwx1BK6hl3xIU:rSQLhj0GAFeG49h+62K6hv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04u5rx.raw.krak.bin.exe

Files

04u5rx.raw.krak.bin.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ