40365a84c1ef08eb80d7b405ffe0bfbe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40365a84c1ef08eb80d7b405ffe0bfbe
Size

7.0MB
MD5

40365a84c1ef08eb80d7b405ffe0bfbe
SHA1

9761263f617e884780ce5e4b06e67d9c3ad490bb
SHA256

34e52920775146d6af6d085789f369fab2364414b7d65beff2e758fc76e7cef0
SHA512

83411eddc760ae13d54f44cd779a5415cd380debef145881dc1e40a76c40139122ceae9cd38939a2fea5d45b63cc82db197c6e6dca238f5ca4573ca2671de933
SSDEEP

196608:q+/aOeF4gTvo2AiujvXWXfa0msDlJhzy6H:OORgTsjPMC0m4xyI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/CRACK/Keytro.exe

Files

40365a84c1ef08eb80d7b405ffe0bfbe
.rar
CRACK/Keytro.exe
.exe windows:5 windows x86 arch:x86

e02e71b0b16aef282ea1d5b77d2f1784

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

glPolygonMode

glu32

gluOrtho2D

rpcrt4

UuidCreateSequential

crypt32

CryptProtectData

kernel32

LoadLibraryA
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

DispatchMessageA

gdi32

SetPixelFormat

advapi32

RegCloseKey

winmm

waveOutPrepareHeader

Sections

.text
Size: - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

19110
Size: - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

19111
Size: 559KB - Virtual size: 558KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE