krpt[.]dll | Triage™

General

Target
krpt.dll
Size 120.3MB
Sample261023-p6y1vaby2s
SHA256 7ccb8d94d5df213fca7441bb2226a708336e1d48adbfd245acd9ff5940a64c2d
MD5 542b1ce261d63bf2c6c07ad4396a4207
SHA1 4ad65b3b9db742369bcf01b68e626d00609755a5
SHA512 1a6f7db4c8534124854b800946c8ba3e82582f64a1b7587b196035791459e8dc396581c7b841f297d7c62720d7927d6ce425bbb8b4170f41ae22d76777a56790
SSDEEP 3145728:5MmKlPe3+/LCxKSMuPJQejvVOFg2mjBN4fo7z+18aBiMylX:5MHPe30JSye7zBN4f80iMylX
TLSH
T1A3583322791E4F06F0F4D5787219AF99113EF9702825693273BA6DE5C962E0B88DDF03
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
krpt.dll

File Explorer

krpt.dll

.dll 120.3MB

krpt.dll

IMPHASH f343a945af36bbbde8fca183a501ed1c
SHA256 7ccb8d94d5df213fca7441bb2226a708336e1d48adbfd245acd9ff5940a64c2d
MD5 542b1ce261d63bf2c6c07ad4396a4207
SHA1 4ad65b3b9db742369bcf01b68e626d00609755a5
SHA512 1a6f7db4c8534124854b800946c8ba3e82582f64a1b7587b196035791459e8dc396581c7b841f297d7c62720d7927d6ce425bbb8b4170f41ae22d76777a56790
SSDEEP 3145728:5MmKlPe3+/LCxKSMuPJQejvVOFg2mjBN4fo7z+18aBiMylX:5MHPe30JSye7zBN4f80iMylX
TLSH
T1A3583322791E4F06F0F4D5787219AF99113EF9702825693273BA6DE5C962E0B88DDF03
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

117032

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

159KB

Virtual Size

159KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

137KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.xnam

Size

42KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

krpt.dll

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

krpt.dll

kernel32

generic