Threat Database Trojans Trojan.MSIL.Krypt.GAK

Trojan.MSIL.Krypt.GAK

By CagedTech in Trojans

Threat Scorecard

Popularity Rank: 6,944
Threat Level: 80 % (High)
Infected Computers: 2,417
First Seen: June 10, 2022
Last Seen: January 2, 2026
OS(es) Affected: Windows

Analysis Report

General information

Family Name: Trojan.MSIL.Krypt.GAK
Signature status: No Signature

Known Samples

MD5: 4b0c37d1fa5257f829f215a7d45eee4b
SHA1: 01a4303209ea6698ff9ab665bd8826c392cec5a9
SHA256: F5CA4335D9548FBDEB8B3EF5341F7FB18CC63D0114CA09A7A6B883EA35BC5E0E
File Size: 598.02 KB, 598016 bytes
MD5: 54303d66735a60dac06a421d19ab56c7
SHA1: 6efff7ed39a179596b1cd48e447b25dc1f3c91bf
SHA256: 5252489F7C421433481A137CBD8F8C8E60A3C2B58F9F7A358AF8AA2C90D9BBE3
File Size: 598.02 KB, 598016 bytes
MD5: 803bb44e67578712663e7161eb567055
SHA1: b738e193a1a25e2cfabf60946d0e55164562d8c9
SHA256: 730F0506844B921DCB698F4309F92DC6D1A910E95C2B717BABBDB78ECDD3117E
File Size: 714.24 KB, 714240 bytes

Windows Portable Executable Attributes

  • File doesn't have "Rich" header
  • File doesn't have debug information
  • File doesn't have exports table
  • File doesn't have security information
  • File has TLS information
  • File is 32-bit executable
  • File is either console or GUI application
  • File is GUI application (IMAGE_SUBSYSTEM_WINDOWS_GUI)
  • File is Native application (NOT .NET application)
  • File is not packed
Show More
  • IMAGE_FILE_DLL is not set inside PE header (Executable)
  • IMAGE_FILE_EXECUTABLE_IMAGE is set inside PE header (Executable Image)

File Traits

  • .NET
  • HighEntropy
  • No Version Info
  • VirtualQueryEx
  • x64
  • x86

Block Information

Total Blocks: 54
Potentially Malicious Blocks: 8
Whitelisted Blocks: 46
Unknown Blocks: 0

Visual Map

0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x x x x x 0 0 0 x x x 0
0 - Probable Safe Block
? - Unknown Block
x - Potentially Malicious Block

Trending

Most Viewed

Loading...