kbndsxabknbn[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

kbndsxabknbn.exe
Size

89KB
MD5

e6dd8b19fbebd47f720b823cb947a109
SHA1

35e6ad9e75ff3d45bcd8dc0b60b412fd7e39ec98
SHA256

83023958b3facb782bff2a975c46fa2c67231fb32904d9992409f7a520e4df85
SHA512

7e26f0c035e2a9d66b796cc6323168ac9714b9dea336825fc42efcfef73b10d0f2e3af80c1b0e79535bb38c265c85ce864cfecde1b14e062811d3fdb9028c32d
SSDEEP

1536:yWRzBkQulzpjtFrOdp3Wa3Jesjibr6X4Trmdv0yBy2fqHWSumN:jadlzpt9Odp3WYt+qWOHy8mL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
kbndsxabknbn.exe

Files

kbndsxabknbn.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ