Static task
static1
Behavioral task
behavioral1
Sample
FindPrivateKey.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
FindPrivateKey.exe
Resource
win10v2004-20230220-en
General
-
Target
FindPrivateKey.exe
-
Size
20KB
-
MD5
c6a24a6fb5065ca21843467f01c08a36
-
SHA1
c1194b34d33d63fe6227cdbf7b58cdafec1b90ec
-
SHA256
e1951e3b27c6c968b0536d909c79b8d33201ed1dbed317f93b6674bb9f94fa58
-
SHA512
19c54ac109582af6070a6afcdd4e4cd62652b9ccb24ee44265ee416bfa8909ac748209d4d39dee07a10a3ded22e79c5b560915f7540f068093ecf5cba6e6228a
-
SSDEEP
96:2k+i4T4xHRN3N/TSHLmvNLw5EGppTF2SkA00n6Hhes6GVHcjMXg5mRbv6D0C8oHx:b+i4TCN/CENLVBATn66y3QAroHpNIk/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource FindPrivateKey.exe
Files
-
FindPrivateKey.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 704B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ