KvG1NAXkgp9PxQb[.]exe | Triage

Sharing

General

Target

KvG1NAXkgp9PxQb.exe
Size

694KB
MD5

cf4274ca7587295567c667da6e1bd0e0
SHA1

1e6f09bbb822019d3311f317688756d48d0d931a
SHA256

3c49acaa8cecf8350267f1be98a72b3c3cc0ab537c0ddb99b20cb6d7e65b916b
SHA512

c201dfabb87ef9252fe1124dc46bf3a6a0da685c87047e53a2d103c9f40c1992c245c168758c6286727150cc71ec20536945279a5d3360cf5ce8ced27ba324f5
SSDEEP

12288:diIR4R52J+XtONxhwH7L8US0zA50ziWjBoAOIFSDhmAfUq/Wy9jwW7i5IjlMIR:diIeeDNwH7o+cW9oAbtAMq+y9GI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
KvG1NAXkgp9PxQb.exe

Files

KvG1NAXkgp9PxQb.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 674KB - Virtual size: 673KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ