Komodo[.]exe | Triage™

General

Target
Komodo.exe
Size 698KB
Sample260725-pcvrbsaj3v
SHA256 fcbc96043c0217e9b62e9329d6b98ecf5223ee0e3976ed5ac83c263428c2d947
MD5 79f30bbec34fbbd5fe391949dc6af0e0
SHA1 e205f23f4b70e461008a7a42c34ee70637469bc3
SHA512 7ea745066fdc077bd954800ed817a92e1e762b187313ed51703010ebb6fd3c5d389544dbfd03cd62a84f6991fdd6548e55ecc1dc6cd0be70b34b78ab8bf9cd55
SSDEEP 12288:vn/4YDS2Du/eMQ4dmddqHTIjtCC6xkSlt1ka6JYiszjWzNettkEwrmZQaMHRQZlb:vn/4YDS2Du/eMQ4dmdMHTIjtCC6xkSld
TLSH
T1BBE4748F416424F9D42462728339FB0E7BEDBCE69C9159EFEA1E3310E978448EC56136
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
Komodo.exe

File Explorer

Komodo.exe

.exe 698KB

Komodo.exe

SHA256 fcbc96043c0217e9b62e9329d6b98ecf5223ee0e3976ed5ac83c263428c2d947
MD5 79f30bbec34fbbd5fe391949dc6af0e0
SHA1 e205f23f4b70e461008a7a42c34ee70637469bc3
SHA512 7ea745066fdc077bd954800ed817a92e1e762b187313ed51703010ebb6fd3c5d389544dbfd03cd62a84f6991fdd6548e55ecc1dc6cd0be70b34b78ab8bf9cd55
SSDEEP 12288:vn/4YDS2Du/eMQ4dmddqHTIjtCC6xkSlt1ka6JYiszjWzNettkEwrmZQaMHRQZlb:vn/4YDS2Du/eMQ4dmdMHTIjtCC6xkSld
TLSH
T1BBE4748F416424F9D42462728339FB0E7BEDBCE69C9159EFEA1E3310E978448EC56136
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

18:ca:33:78:36:75:14:e4:2c:d1:b5:3e:09:bd:e4:3e:ef:74:34:68:da:c4:4d:45:e2:91:93:7a:c2:04:2e:ee

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

NO CERTIFICATE

Chains

Jan 1, 0001

Minor OS version

0

Major OS version

6

Entry point

212480

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

AUCDaemon AccelerationResolver AcceptPepper AccordionPepperBreakpoint ActivateMigrateEnclave ActivationStatelessCommit AdapterMinibatchDetect AddVelocityScheduleNextHop AmbassadorECT AmbassadorSubscriberAdjacency AnisotropyThroughput AnnounceFlushGraph AnnounceRecall ArchiveROC Attend AttestationInfer AttestationPredictionConstraint AudienceLease AuthorityChunk AvatarEmbed BackChallenge BackendCompactMask BackendRotate BackendTapSoftmax Backoff BackoffRecommend BandwidthClassReorder BatchThroughput Beam BeamReadinessCE BiasOverlayRetry BiasResume BlendReplicaPropagation BleuVelocityPinch BloomScale BloomTransitionSealing BloomTrigger BounceScheduler BoxcastFadeSidecar BreakpointPatternAttend BrokerRefresh BulkheadHandler BulkheadTransition CEExchange CanaryConsumer CanaryDSCP CanaryDehydrate CanaryManager CanaryRestore CanarySoftmaxBack CellSpecularBlueGreen CheckpointAdjacencyShadow CheckpointTruncateTrace ChipFamilyTile CircuitBreakDamper ClampFixedUpdateExchange ClampResponsive ClassLogit Cluster ClusterIngressQuote ClusterPrefetchResponsive CnameLease ColliderGap ColliderTruncate ColumnZoomed ComboboxApplyTorqueShadow CompactionChunk CompactionResidual ConcludeDSCP ConcludeWrapper CongestionOrchestratorSpacing ControllerOverlap CorruptAdaptiveShrink CorruptBackoff CorruptRateBlur CorruptSealingDiscover CostAccept CrossEntropyKinematicSpring DamperShrink DeadlineHelper DeadlineRetry Decapsulate DecapsulateBatch Demultiplex DemultiplexRestoreKinematic DemultiplexScanQuery DenseOcclusionFilter DenseStateInit DeploymentExponential DespawnHydrateROC DespawnPongBackoff DetectRagdoll DewSpring DialMipmap DialPersistent DialResponse DisabledRotate DiscoverDeadlineInit DiscoverRevoke DownstreamMinibatchECN DragBounceMipmap DrawerBackoffValue DrawerGreedy DuplicateROC DynamicDemultiplex DynamicRolling DynamicSchedule ECNHydrate ECTAdaptivePressed EdgeTile ElevationHandler EmbedDialLogit EmbedPortalPath EmissiveMergeMargin EmissiveSpawn EmitterProcessor EnclaveLeaderDSCP EnclavePing EnclaveTransitionSpring EnclaveVortexBurst EncoderRevoke EndpointPongAttestation EntropyLiveness EphemeralPatch EvaluateLinearConclude EvictStroke ExchangeHandler ExchangeSalt Extrapolate FHelper FadeCorrupt FadeEphemeral FadeInsets FadeStateful FadeTTL FailoverEpoch FailoverPath FamilyDroppedBack FamilyProjectTTL FamilyShadowTurbulence FeatureHeuristic FeatureRoundTrip FeedForwardMinibatchElevation FeedForwardWrap FillBlur FillHelper FilterProcessor FixedUpdateRollout FlipAnisotropy Forceful FunctionWrap GatewayApplyTorqueRagdoll GestureConstraintPrecision GestureDeadline GestureDiff GesturePropagationBounce GestureSafeAreaLateUpdate GlossShardCircuit GoodputTick Graceful GradientBlueGreenSalt GradientRank GrassBatchBackprop Greedy GridReconcileRate HairTTLRetry HandshakeTap HandshakeWaypoint HapticLODFailover HeadElevationSalt HeadEnclave HeadPool HealthCheckTunnelCircuit HeightmapRollout HeuristicExtrapolate HeuristicKeyBoxcast HeuristicPan HeuristicPepperRateLimit HeuristicWarm HoverBackprop Hydrate ImpulseQosRecall ImpulseSlide InferenceEase InferenceUnmount IngressSnapshot InitProcessor InitWrapper InsetsInfer IssuerBackprop JitterBlueGreen JitterInterpolate JoinerDehydrate JointSpanPan JwtSegmentRadius KeyHandler KeyRestore KinematicRadiusTurbulence LabelBack LabelDetectBurst LambdaTeleportValidate LatencyDetectTTL LatencyResolver LatencySnap LayerHyperGesture LayerTextureOrchestration LeaderOverlap LearnerRetry LeaseKinematicTokenize LeaseSmoothDamp LeaseTrack LogitKey MAPSlide MAPTick MarginRaycast MarginRougeRateLimit MaskDamper MaskTapPerplexity Match MeasurementEase MemtableParticle Merge MinibatchMirrorFlush MipmapSaltDeprovision MirrorPad ModalAnisotropy ModalGracefulEpoch Multiplex NATExpireGap NavmeshCron NavmeshMetricSalt NavmeshQueueEpoch NavmeshRougeJoint NextHopGoodput NextHopPepperFilter NodePoolMeasurement NodeProxyPath NonceBlur OcclusionSaltBleu OrchestrateArchiveEdge OrchestrationGap OrchestratorInsetsGradient OriginBackprop OriginNavmeshDuplicate OverlapCircuitBreakStep OverlapJoint PacketLossTriggerCold Pad PaddingHandler PaddingSpawn PanProvider PanSpreadCorrupt PanWaypointHaptic ParticlePing ParticleRecommend ParticleVortex PathHop PeerAdaptiveChallenge PepperConstraint PepperFill PepperInfer PepperProvider PepperResolver PerplexitySafeAreaHandshake PersistentConsumer PinchDial PinchEvaluate PingCron PongCancelSafeArea PopoverArchiveKinematic PopoverBorder PortalSlide PositionalBack PositionalGestureRotate PrecisionReassemble PredictionRigidbody ProducerProbeOrchestration Project ProjectJoint PropagationAdjacency ProvisionStateless QueueHeartbeat QueueInfer QuorumModalBaggage QuoteDSCPProject QuoteEmitterGradient ROCTextureActivate RagdollLivenessDeployment RagdollRadius RagdollShadowBleu RatingLatency ReassembleVacuumSpread RebalanceSkip RecallHelper ReconcileFadeValidate RefreshSchedule RegressBoxcastHaptic ReorderUnmount ReorderWrapper ReshardVacuumCost ResidualTraceActivation ResponseManager ResponsiveParticlePerplexity ResponsiveTileLogit ResumeECT RetransmitBleuDynamic Retry RetryEphemeralCollider RetryEvaluate RetryNextHop RevokeRolloutShadow Rolling RolloutKinematicSetDrag RolloutResolver RoomBiometricFilter RoomPasskeyBulkhead RotateBleuExchange RotateMeasurement RotateTowards RougeBleuShadow RoundTripManager RouteWrapper RowGraph RowResponsive RttFilter RttResponsiveCron SaltManager Scale Schedule SchedulerAdaptiveCompact SchedulerFillCommit ScopeRouge ScopeSnackbarTap ScoreBlueGreen ScoreFreeze SealingRetryFixedUpdate SegmentStroke ServiceExtrapolate ServiceParticle ShadowCancellationProject ShadowEphemeralActive ShadowNavmeshAttention ShadowNextHopBinding ShardEphemeralActivation Shutdown ShutdownLateUpdateCrossEntropy SidecarBreakerNextHop SidecarPad SkeletonSpring SkeletonTurbulence SkinNATStroke SlaMount SlaResumeCancellation SlideBleu SliderJitter SliderTextureMask SmoothDampSealing SnapMAP SoftmaxEmbed SoftmaxResolver SpacingManager SpanConsumer SpanFailover Spherecast SpinnerExpire SpringRetryBeam StandardizeAttendRefresh StandardizeBack StartupCost StateMultiplex StatelessHandler StatelessPersistentProject StepperChunk StrokeChunkProject StrokeInit SubscriberEpochPattern SuspendSmoothDampBreaker Sweep SweepLease SwitchForcefulToken TTLCancellationTick TabBounceHaptic Teleport TeleportEpoch TextureAnnounce TextureLatencyQuery TextureProvider ThroughputForceful ThumbSidecarInit TickReshardMeasurement TileCostReshard TimeoutBreakpointCircuitBreak TimeoutEdge TimeoutHop TimeoutManager TimeoutNormalize TimeoutOverlap TimeoutSpan ToastFlipShadow ToggleRateLimit TooltipEvict TooltipSoftmaxBack TopologyGap TorqueAdaptiveRotate TraceEvict TransformerMirror TransformerRadiusMask TriggerLeaseCircuitBreak TruncateDiscoverRoute TurbulenceInterpolate Unmount UnmountBlurCorrupt UnmountScheduleExchange Unseal UpstreamMeasurementAcceleration ValidateHandler ValueParticleRoute ValueTeleport VectorQosExchange VectorWarmCanary VelocityBackpropBurst ViewportDial ViewportProcessor VortexShadow WarmInterpolateCost WindGrassPath WrapFill WrapReconcileSoftmax ZonePersonalize ZoomedSlideWaypoint

Name

.text

Size

207KB

Virtual Size

207KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

265KB

Virtual Size

264KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

512B

Virtual Size

456B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

189KB

Virtual Size

189KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

Komodo.exe

PE Signature issue

generic