Static task
static1
Behavioral task
behavioral1
Sample
Keyscape Software Update.exe
Resource
win10-20220812-en
General
-
Target
Keyscape Software Update.exe
-
Size
6.4MB
-
MD5
3c611d4f0c76a7f367a320a495642467
-
SHA1
f5f8a4ecc1800cbd587ec07fd98473ed32827207
-
SHA256
56732e0ed6bab89a8630bdf5e391aaf36d058cdfc037f34b16544ebfe7933ec5
-
SHA512
b476cf2b8c6830ddb51491432a4e84f7c47a0255827ca03de2fc262c1a855ed78dbb9a3939cb53d3dab88b41bbf0d0df634a82e601d9bb621d1f13bd19a8a5c2
-
SSDEEP
196608:1RV52zijeNlWwyU9pnK36SmRvccTzqlZZ7:1Tgz7lWUPnK33m1xo5
Malware Config
Signatures
Files
-
Keyscape Software Update.exe.exe windows x86
Code Sign
d7:14:c0:36:ad:fb:d4:10:65:26:a5:07:a9:ba:6f:65:22:96:2c:34Signer
Actual PE Digestd7:14:c0:36:ad:fb:d4:10:65:26:a5:07:a9:ba:6f:65:22:96:2c:34Digest Algorithmsha1PE Digest MatchestrueTrustedfalseSigning CertificateNO CERTIFICATEHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ