Static task
static1
Behavioral task
behavioral1
Sample
NewBlue Multikeygen.exe
Resource
win10v2004-20240221-en
General
-
Target
NewBlue Multikeygen.exe
-
Size
163KB
-
MD5
48850a17887f33dcabe06b707c0d35d9
-
SHA1
c121b25beaf61f2cca864d455c681237aefc0a4e
-
SHA256
4eaccb222b5151769dcd2116b469a9c58d2b560a95996b4b1b6f3fbf3a5efbb1
-
SHA512
41d209367b7340a4d548c8208345310bf8fb150e89a1a645deea32a5de9f32fd9c1b32bca785aa406b3f57785e7406b8d48e6d9dbb9c8276e5b37cc3f237385a
-
SSDEEP
3072:ED6BxGQb3Ki/KgXCM95kMSQvCV+Lfeuwf3gcUagAcDzQrpwYDyb3lquLRDo/b:e6PDl/JSM8MSQvCILfngwbaZcoQb3lb1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NewBlue Multikeygen.exe
Files
-
NewBlue Multikeygen.exe.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 157KB - Virtual size: 508KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE