?TemporaryArrayCre
Static task
static1
Behavioral task
behavioral1
Sample
Product_Key_Explorer_2_1_6_serial_maker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
Product_Key_Explorer_2_1_6_serial_maker.exe
Resource
win10v2004-20231215-en
General
-
Target
16c241a753a73f14ec5c4fe2f63333d6
-
Size
148KB
-
MD5
16c241a753a73f14ec5c4fe2f63333d6
-
SHA1
c9a6b123a5da47f058a55aba0c98abb64016089b
-
SHA256
3345ac758c4058712f319cc6edc171fbddb5bff47cb1552437d00c77e35e5e7a
-
SHA512
70da0c787466d94fbd8d05265e5cbb4dc78a76f2c0d2e1f7122301953f50cde2c7cf4ec6a3ead9a97b1fe9ef83d65e6ebea4fddca4e6087aa65bd84e4070ddc0
-
SSDEEP
3072:BK2ed1KNZH8uwnr/1+3p8M7K2EJKgZu/sEDIVdyfJE:02tfTwnsLK2E0dUf4JE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Product_Key_Explorer_2_1_6_serial_maker.exe
Files
-
16c241a753a73f14ec5c4fe2f63333d6.zip
-
FFF.nfo
-
FILE_ID.DIZ
-
Product_Key_Explorer_2_1_6_serial_maker.exe.exe windows:5 windows x86 arch:x86
cda18ad1570bf5d951938afa6d1f4098
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlCompareMemory
user32
FindWindowA
PeekMessageW
GetWindowRect
CharNextW
SetFocus
wvsprintfA
IsWindowEnabled
ValidateRect
OffsetRect
AdjustWindowRect
GetAsyncKeyState
SetScrollPos
DrawFocusRect
WindowFromPoint
GetShellWindow
OpenIcon
CreateIconFromResource
kernel32
GetCommState
GetLastError
FindCloseChangeNotification
GetOverlappedResult
GetStartupInfoW
EnumResourceNamesA
Exports
Exports
Sections
.text Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hvb Size: - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hv Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ