KratosKnife[.]exe | Triage

Resubmissions

19/09/2024, 13:05

240919-qbt9vazcna 3

19/09/2024, 12:58

240919-p7yrgazbjb 3

Sharing

Copy URL Twitter E-mail

General

Target

KratosKnife.exe
Size

14.1MB
MD5

9ad2f1b86df272d01757ab3c8077ac34
SHA1

d83c115341790ae90adbae6a27aa41a8c30c0ac7
SHA256

8ed082f73b32971939ff073c0b914b00212920cb497fb0d917e75b9bd324a44e
SHA512

959d59b38b6e83b18bcf9957813c53faffb9b580e7f7a5d247b9db1865edffd834114e6e18ea088ea4b28e29c4c722b13d8a20b0e65188e720d64340ef07b7e7
SSDEEP

393216:1CjHVEbdL01+l+uq+VvCiUvz1uceBbXMCHWUjFjx5Wsq8xTea6Trh:1CBEbR01+l+uqgvvUvh/eBbXMb84squG

Score

3^/10

pyinstaller

Malware Config

Signatures

Detects Pyinstaller 1 IoCs

resource	yara_rule
sample	pyinstaller

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KratosKnife.exe

Files

KratosKnife.exe
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ