Static task
static1
Behavioral task
behavioral1
Sample
keygen.exe
Resource
win10v2004-20230220-en
General
-
Target
9425976347.zip
-
Size
188KB
-
MD5
fd65908dfa9d716953b43b3ee0fc53ca
-
SHA1
5dca2e0d52891fac226eb9683e53ac9232fff2ab
-
SHA256
acc36119f08ac75c0e750826ed76950b67f43b398336f5561a9ad2f67d147726
-
SHA512
8c7dc84f8e34b1047e625ec7780a73755fc0d0672fb41f5d7b47d25f9c6ade839eba8b1edb861999603bd7bddf306bb839458d04e998f8543a6dc8e78b684fad
-
SSDEEP
3072:F+aazSpy6Lr4bGCiF45lU3ghj2/tRpyccAfGTexiSAxPUFePFVAINXiblrXr:F3ImruGCiFMlDhmoccomEiSsTHAE89
Malware Config
Signatures
Files
-
9425976347.zip.zip
Password: infected
-
ecc06256c4bad6af5d6dc6cb2053f69bec959dc597c677e3ac89f688e5e3ee61.zip
-
CORE.NFO
-
FILE_ID.DIZ
-
keygen.exe.exe windows x86
29db3ad3a02b4808b1332e0e02883a01
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
gdi32
TextOutA
msimg32
AlphaBlend
Sections
CODE Size: 180KB - Virtual size: 404KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE