KeyRun[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

KeyRun.exe
Size

262KB
MD5

288efe01b6c88250002c1f6223bc8298
SHA1

2507f6c7f6e7e73f2dd7308c4182f7b742f554a0
SHA256

9f4acc8f4fea72daabd5c57e062c7c1fa7854e04f40641d77d3ba02b59a1ab83
SHA512

43788df118cb95256f022074476c2a1b3ecbf24ce7a450c531827518ae95fb14322d09d82498b34291bec2de69eb2be2afbdd1248bdd37b9f3fd74b7525559b5
SSDEEP

6144:K0uw6Vy2QbZa9Dyp1niDpZQojQoa03QMlNb:Kg6Vy2QEVK1niDpZQJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KeyRun.exe

Files

KeyRun.exe
.exe windows:4 windows x86

63ab165969a87223df7760a31d8d6b46

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetOEMCP
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
LCMapStringA
GetACP
VirtualAlloc
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
SetStdHandle
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetCPInfo
HeapSize
GetProfileStringA
HeapReAlloc
TerminateProcess
ExitProcess
HeapFree
HeapAlloc
RaiseException
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
RtlUnwind
GetTickCount
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileTime
GetFileSize
GetFileAttributesA
SetErrorMode
GlobalGetAtomNameA
GlobalAddAtomA
GetModuleFileNameA
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
WritePrivateProfileStringA
GetVersionExA
GetProcessVersion
LoadLibraryA
GetProcAddress
FreeLibrary
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
lstrcpyA
SizeofResource
GetLastError
SetLastError
GlobalFlags
FormatMessageA
LocalFree
MulDiv
CloseHandle
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
lstrcpynA
GetVersion
lstrcatA
GetCurrentThreadId
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
LCMapStringW
GetLocaleInfoA

user32

SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
IntersectRect
InflateRect
RegisterClipboardFormatA
PostThreadMessageA
GetCursorPos
MessageBoxA
SetCursor
ShowOwnedPopups
PostQuitMessage
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
PostMessageA
UpdateWindow
SendDlgItemMessageA
SystemParametersInfoA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
ScreenToClient
ScrollWindow
LoadMenuA
SetScrollInfo
ShowScrollBar
SetScrollRange
GetScrollPos
GetNextDlgGroupItem
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
SetPropA
UnhookWindowsHookEx
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
EnableWindow
LoadIconA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetWindow
GetWindowRect
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
SetRect
CopyAcceleratorTableA
CharNextA
GetParent
GetWindowLongA
GetDlgItem
IsWindowEnabled
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
IsWindowUnicode
SendMessageA
MessageBeep
CharUpperA
WindowFromPoint
ReleaseCapture
OffsetRect
InvalidateRect
FindWindowA
GetSysColorBrush
LoadCursorA
GetDesktopWindow
ClientToScreen
PtInRect
GetClassNameA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
DestroyMenu
LoadStringA
MapDialogRect
GetMessageA
SetScrollPos
ValidateRect
TranslateMessage

gdi32

IntersectClipRect
DeleteObject
GetDeviceCaps
GetViewportExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextExtentPointA
LPtoDP
DPtoLP
GetTextColor
GetBkColor
PatBlt
GetMapMode
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
GetObjectA
SetBkColor
GetWindowExtEx
CreateDIBitmap
BitBlt
CreateCompatibleDC
SetTextColor

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegEnumValueA
RegOpenKeyExA
RegEnumKeyExA
RegSetValueExA
RegDeleteValueA
RegQueryValueExA
RegCreateKeyExA
RegCloseKey

shell32

DragQueryFileA
DragFinish
ShellExecuteA

comctl32

ord17
ImageList_Destroy

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CoGetClassObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
OleUninitialize

oleaut32

OleCreateFontIndirect
SysFreeString
VariantClear
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysStringLen
SysAllocStringLen

Sections

.text
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

63ab165969a87223df7760a31d8d6b46

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

oleaut32

Sections

.text Size: 154KB - Virtual size: 153KB

.rdata Size: 34KB - Virtual size: 33KB

.data Size: 19KB - Virtual size: 35KB

.idata Size: 9KB - Virtual size: 8KB

.rsrc Size: 45KB - Virtual size: 44KB

.text
Size: 154KB - Virtual size: 153KB

.rdata
Size: 34KB - Virtual size: 33KB

.data
Size: 19KB - Virtual size: 35KB

.idata
Size: 9KB - Virtual size: 8KB

.rsrc
Size: 45KB - Virtual size: 44KB