Static task
static1
Behavioral task
behavioral1
Sample
keygenme_2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
keygenme_2.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
keygen.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
keygen.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
src/make.bat
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
src/make.bat
Resource
win10v2004-20231222-en
General
-
Target
7bee10f07cba7a5303aeb1c2575860e4
-
Size
79KB
-
MD5
7bee10f07cba7a5303aeb1c2575860e4
-
SHA1
52deaaf0b35e75eb38b2aa9640a0d04e997fa368
-
SHA256
c3bb5a557f3743ccd4d2f8f868189276de96bc366ef38487a927c765be58885d
-
SHA512
4d23202eb0c720cf4f28e9b108e84ad46ae4aca4217f07e63852ec18714df48a22a9bf2d418e55de383117037c34bb32a553e8ab1e4aa57b6c42bdb77f2586fd
-
SSDEEP
1536:c1WphXc15cVAStwXBnOraD6FGfD+R1y5qK7V7mslvII+zbgOkcsAIRwsS9zzN8sR:c04/cVZwXBnl8GfD+ji7V7msvII+vYcn
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack002/keygenme_2.exe unpack001/keygen.exe
Files
-
7bee10f07cba7a5303aeb1c2575860e4.zip
-
cauchy.keygenme.2.rar.rar
-
File_ID.diz
-
HTBTeam.nfo
-
keygenme_2.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 316KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
keygen.exe.exe windows:1 windows x86 arch:x86
f56985cfc48658c63b62bd37fc834bed
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetModuleHandleA
RtlUnwind
user32
SetWindowTextA
DialogBoxParamA
EndDialog
GetDlgItem
SetDlgItemTextA
GetDlgItemTextA
SetFocus
MessageBoxA
crtdll
__GetMainArgs
exit
floor
log
memset
raise
signal
sprintf
strchr
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 4B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 252B - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 772B - Virtual size: 772B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
src/code.c
-
src/make.bat
-
src/resource.h
-
src/rsrc.res