Behavioral task
behavioral1
Sample
Keygen pass 1234/Keygen/Keygen.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Keygen pass 1234/Keygen/Keygen.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
Keygen pass 1234/Keygen/Pass.rtf
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
Keygen pass 1234/Keygen/Pass.rtf
Resource
win10v2004-20220812-en
General
-
Target
99dd54739acaffd8d5e3cbbe7deaca7af2a9e228a160929174fd8c5832b6a996
-
Size
52KB
-
MD5
b24e5364e7e29d03948d36d36a1eb650
-
SHA1
1e01a3f509a5e8d161913b657549226fd78b197e
-
SHA256
99dd54739acaffd8d5e3cbbe7deaca7af2a9e228a160929174fd8c5832b6a996
-
SHA512
3e3aaffea0ce4957c2832762a6c8d97343b013496c126d13d76f108a37ce0f6dce52152113f60c6f98fd16a2133677a1af5921cd18f0217a6a740a5f17068ce9
-
SSDEEP
768:BT/83kD7bAe/q0DQaUrp9CQtmWXKUrT6bs18Se2/UgsBADGl4r:900LAOQaU19CQ0WaUrT6o8V8UHy6lo
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Keygen pass 1234/Keygen/Keygen.exe upx
Files
-
99dd54739acaffd8d5e3cbbe7deaca7af2a9e228a160929174fd8c5832b6a996.rar
Password: 1234
-
Keygen pass 1234/Keygen/Hướng dẫn mua bản quyền tại www.Key4VIP.info.url.url
-
Keygen pass 1234/Keygen/Keygen.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Keygen pass 1234/Keygen/Kho DATA khổng lồ.txt
-
Keygen pass 1234/Keygen/Pass.rtf.rtf
-
Keygen pass 1234/Keygen/www.Key4VIP.info Ban key Windows Server bao hanh Vinh Vien,Win8.1,Antivirus,SQL,TMG...html