Static task
static1
Behavioral task
behavioral1
Sample
keygenServ.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
keygenServ.exe
Resource
win10v2004-20230220-en
General
-
Target
keygenServ.exe
-
Size
40KB
-
MD5
f9d169bb6020846ccd832d09e5d153bd
-
SHA1
b27bc2e8fe6c859eb6b27f573f74ae29b64df5eb
-
SHA256
4be2fd5f1865d91e80991be6c7b6b59ba2fc5bb4f08c5b34fbc81579d9ff2c07
-
SHA512
decb8113723718f1ea3453e37997aa0f7d65c3d43e6228aa08b1ea1349c5b6b314e329ac048038636840a0b9911d60e441d42270bc032872d7dd2ea237d4640c
-
SSDEEP
768:JP0UJO4Su/FpQST6NwdqAHNBo5kDecNw9Mpj74Ox3pAD6N6XTC:ljPN96zlSpiCjhSDU6XT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource keygenServ.exe
Files
-
keygenServ.exe.exe windows x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
kkrunchy Size: 36KB - Virtual size: 5.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE