Static task
static1
Behavioral task
behavioral1
Sample
inject-keylogger.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
inject-keylogger.exe
Resource
win10v2004-20230220-en
General
-
Target
inject-keylogger.exe
-
Size
5KB
-
MD5
bb95451a82f54d41f1ada77b0d1720b8
-
SHA1
565e799049d74e25ca3c55ae02dd16a8dd464363
-
SHA256
cc3350679496bf725149a79cc991bfe2239b530986cc83558641b129f5525b43
-
SHA512
dc49acd13e3f5cee7bcbcb2d5a2f2094365ba051b2e93b6d3e8bbc8f98d0d4700f04a8f0844c9be8ff42184341da6f9916c8db3ec675319fd1534c40e33efe8b
-
SSDEEP
48:6BHiCqucOeJnh08raiSFDbLfNMeySrNo788OOqrkpbv3XpotSBvlWQaS8fcSFSpu:g4tJt+358GkpBvYi8U5zNt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource inject-keylogger.exe
Files
-
inject-keylogger.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ