KRX Client[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

KRX Client.exe
Size

24.6MB
MD5

f794263306e546359a83d3c20b447423
SHA1

31acc3263080ef9310896b48acd4d7d94e83b07f
SHA256

5611af8b9df8febe31a1637e83bdb4644d04d484fb26b96ae868c5fbec9f2cba
SHA512

174465dddac0dc16229373d756f7c636114c946dac5084fa7ff01bfb9137b2632f249fac26733de4d10d804e078b1bd0474ed8baa36df72b6ed9693c0051a6ad
SSDEEP

393216:994w6S7764WL/uwH/y5C/kixQ2GUvNYDptVW5u2+noYhWGYn5rvWfzgMKXSA4c:f4NgmR/uHC/Za2GoNUtVcBOo4YnsfNg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KRX Client.exe

Files

KRX Client.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 24.5MB - Virtual size: 24.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ