3c8cf468b2699730e23e17b4d92eda91

General

Target

3c8cf468b2699730e23e17b4d92eda91
Size

230KB
MD5

3c8cf468b2699730e23e17b4d92eda91
SHA1

3caf4827b654bf181efb1743edeaea5274e854db
SHA256

55acd4f620218ca952ca90d05563a7b02e35cd2ffd44057c41e1fea5fb1efcbb
SHA512

aa28122e6cd8acc4db1903e1a4dd44ecf0c9550f28e8017bf33f8d8e7236a8b9555d620d603aa4b42dd20caf7f1f346a6391938db0866c078647216565f02b5b
SSDEEP

6144:kd45SrMuHlnBCuetEOb2u++/wA6sn+72WTVozsx32:kq5BuVBC7Nb2uh4A6I+7dVoza2

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/KeyMaker.exe
unpack001/te.exe

Files

3c8cf468b2699730e23e17b4d92eda91
.cab
KeyMaker.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 353KB - Virtual size: 352KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 52B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
te.exe
.exe windows:4 windows x86 arch:x86

37dbf270bfc619f4b7a89f6c0900c7d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EmptyClipboard
EndMenu
EndPaint
FillRect
GetFocus
LoadCursorA
DeleteMenu
MessageBoxIndirectA
OffsetRect
SetCursor
SetMenuInfo
ShowCaret
CharUpperBuffA
CharLowerA
ChangeMenuA
LoadImageA
wsprintfA

kernel32

OpenFileMappingA
FlushFileBuffers
EnumResourceTypesA
lstrcmpA

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

CODE Size: 353KB - Virtual size: 352KB

DATA Size: 5KB - Virtual size: 5KB

BSS Size: - Virtual size: 2KB

.idata Size: 8KB - Virtual size: 8KB

.tls Size: - Virtual size: 52B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 25KB - Virtual size: 24KB

.rsrc Size: 23KB - Virtual size: 23KB

37dbf270bfc619f4b7a89f6c0900c7d8

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 25KB - Virtual size: 25KB

.rdata Size: 1024B - Virtual size: 2KB

.data Size: 27KB - Virtual size: 30KB

CODE
Size: 353KB - Virtual size: 352KB

DATA
Size: 5KB - Virtual size: 5KB

BSS
Size: - Virtual size: 2KB

.idata
Size: 8KB - Virtual size: 8KB

.tls
Size: - Virtual size: 52B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 25KB - Virtual size: 24KB

.rsrc
Size: 23KB - Virtual size: 23KB

.text
Size: 25KB - Virtual size: 25KB

.rdata
Size: 1024B - Virtual size: 2KB

.data
Size: 27KB - Virtual size: 30KB