__RemovePropW@12
Static task
static1
Behavioral task
behavioral1
Sample
Driver.Detective.Working.keygen.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Driver.Detective.Working.keygen.exe
Resource
win10v2004-20220812-en
General
-
Target
3ba6e64bf0d2d4a682beb12dc83d006a5d1fb6a8448060df84cc0879fb134b45
-
Size
136KB
-
MD5
05a490c828067517f87a61f43dd95b39
-
SHA1
33b8af935dc7c0ac2a217aea591968b22c0922a2
-
SHA256
3ba6e64bf0d2d4a682beb12dc83d006a5d1fb6a8448060df84cc0879fb134b45
-
SHA512
b0a14c94a07202c3faa32f3241dc4c9b2e58b483321b092e7ba54593e3ae358f460df75e9684220e2078f020cf9ac9f58ce0627ed12a0346645af6686484862f
-
SSDEEP
3072:ylvamHgx3m3uk6gIPbUisP9WqC81How60Y+YiZW8Y5HAfrnuqk:Ovv+m3J6rUisI81IZ086WHi+
Malware Config
Signatures
Files
-
3ba6e64bf0d2d4a682beb12dc83d006a5d1fb6a8448060df84cc0879fb134b45.zip
-
Driver.Detective.Working.keygen.exe.exe windows x86
8ae74cf5b0e52f8704cac79b7955e656
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrCpyNW
PathUnquoteSpacesA
StrFromTimeIntervalA
PathCombineA
StrFormatKBSizeA
shell32
ord716
kernel32
LockFile
GetCommConfig
TlsSetValue
SetFileShortNameW
GetProfileStringW
GetStartupInfoA
ChangeTimerQueueTimer
QueryPerformanceCounter
FileTimeToDosDateTime
SetProcessWorkingSetSize
CreateDirectoryExW
SignalObjectAndWait
LoadLibraryExW
SetNamedPipeHandleState
CreateSemaphoreA
GetLogicalDriveStringsW
lstrcpynA
CreateMutexW
GetDevicePowerState
user32
ReplyMessage
HideCaret
CopyAcceleratorTableW
EnumThreadWindows
GetDlgItemTextW
ScrollWindowEx
WindowFromDC
LoadBitmapW
MapVirtualKeyExW
LoadAcceleratorsW
GetDC
WinHelpA
IsCharLowerA
GetMenuStringW
GetClipCursor
CopyImage
DialogBoxIndirectParamW
DrawTextA
DlgDirSelectExW
InvalidateRgn
DrawTextExW
TranslateMessage
SetCursorPos
GetRawInputBuffer
PeekMessageW
TranslateAcceleratorA
GetListBoxInfo
GetTabbedTextExtentA
SetMenu
AdjustWindowRectEx
MessageBoxW
MapWindowPoints
LoadKeyboardLayoutA
SetWindowTextW
CopyRect
GetMessageTime
DispatchMessageW
GetWindowThreadProcessId
SetPropA
gdi32
ScaleWindowExtEx
GetTextExtentPointW
GetOutlineTextMetricsW
CreateBrushIndirect
BeginPath
GetCurrentObject
GetCharWidthW
Arc
GetCharABCWidthsI
RemoveFontResourceA
GetLayout
GetEnhMetaFileA
SetPixel
PolyTextOutA
advapi32
GetAce
AddAuditAccessObjectAce
AreAllAccessesGranted
BackupEventLogW
Exports
Exports
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.exdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.page Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bmem Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedat Size: 1024B - Virtual size: 612B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 958B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
FILE_ID.DIZ
-
Lz0.nfo