Static task
static1
Behavioral task
behavioral1
Sample
main.exe
Resource
win7-20220311-en
Behavioral task
behavioral2
Sample
main.exe
Resource
win10v2004-en-20220113
General
-
Target
main.exe
-
Size
29.8MB
-
MD5
05eddf246ff3900650373bab2a45f8f1
-
SHA1
4b1aa434604bacd73857ee1058610ff442ed124f
-
SHA256
69db77173df272098da80c4bdff6147536b851809cfb2116fc0085bfc885a663
-
SHA512
8ff0d35ee7478dfe8a9371029d5080259d9e98548ab1119364c8a9d9292931fa0d7d85f95ede68242a682b22acac6e6499bf2c65a4d91ac04209d62e01684188
Malware Config
Signatures
-
Snake Keylogger Payload 1 IoCs
Processes:
resource yara_rule sample family_snakekeylogger -
Snakekeylogger family
-
Detects Pyinstaller 1 IoCs
Processes:
resource yara_rule sample pyinstaller
Files
-
main.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
zy+b*d Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 29.6MB - Virtual size: 29.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ