Static task
static1
Behavioral task
behavioral1
Sample
ShowKeyPlus.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
ShowKeyPlus.exe
Resource
win10v2004-20231023-en
General
-
Target
ShowKeyPlus.exe
-
Size
6.2MB
-
MD5
72abbdb34ee1eefbb1df440bf40d5f30
-
SHA1
6a956364324f9ddb5af5805700435134a19b1e04
-
SHA256
97e14bfa1588fd30e1a79871c838360776448c50fb18610c872f6c477d33a0ef
-
SHA512
c5b7c1bdb38fdd2451adc8fbd5be6f5abd73443a36cd09f7464cc279d35590748eb65a8c4b1c3ce8ef40aa1cbec962077ff2e0b1e9363f775b0981f028281e3d
-
SSDEEP
49152:4L+H8v2N3PDLBGzwvSR6ocCfw7lskLkXKqpEGL+H8v2N3PDLBAF71y3WPKUd3eL1:+yLBHvSsozfwqwKKKVyLB+OL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ShowKeyPlus.exe
Files
-
ShowKeyPlus.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 6.2MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ