Static task
static1
Behavioral task
behavioral1
Sample
KeyMaker.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
KeyMaker.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
te.exe
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
te.exe
Resource
win10v2004-20220812-en
General
-
Target
55acd4f620218ca952ca90d05563a7b02e35cd2ffd44057c41e1fea5fb1efcbb
-
Size
230KB
-
MD5
3c8cf468b2699730e23e17b4d92eda91
-
SHA1
3caf4827b654bf181efb1743edeaea5274e854db
-
SHA256
55acd4f620218ca952ca90d05563a7b02e35cd2ffd44057c41e1fea5fb1efcbb
-
SHA512
aa28122e6cd8acc4db1903e1a4dd44ecf0c9550f28e8017bf33f8d8e7236a8b9555d620d603aa4b42dd20caf7f1f346a6391938db0866c078647216565f02b5b
-
SSDEEP
6144:kd45SrMuHlnBCuetEOb2u++/wA6sn+72WTVozsx32:kq5BuVBC7Nb2uh4A6I+7dVoza2
Malware Config
Signatures
Files
-
55acd4f620218ca952ca90d05563a7b02e35cd2ffd44057c41e1fea5fb1efcbb.cab
-
KeyMaker.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 353KB - Virtual size: 352KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 52B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
te.exe.exe windows x86
37dbf270bfc619f4b7a89f6c0900c7d8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EmptyClipboard
EndMenu
EndPaint
FillRect
GetFocus
LoadCursorA
DeleteMenu
MessageBoxIndirectA
OffsetRect
SetCursor
SetMenuInfo
ShowCaret
CharUpperBuffA
CharLowerA
ChangeMenuA
LoadImageA
wsprintfA
kernel32
OpenFileMappingA
FlushFileBuffers
EnumResourceTypesA
lstrcmpA
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE