Static task
static1
Behavioral task
behavioral1
Sample
kg.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
kg.exe
Resource
win10v2004-20240226-en
General
-
Target
bfg_keygen_2024.02.18.rar
-
Size
481KB
-
MD5
1f08f4378679953424a5b5d65f71ac55
-
SHA1
2bb9cb27155b03309f072b63cb3a924f5b879e3c
-
SHA256
9b2865c344f4f88312f25680b8b8ef159bb2fb7189ebfc0937ee93ea0adcfe7f
-
SHA512
a8250c11bfe1aa83af16abbdceb7a957233ed02868cccbd6ca8fdbfb602b6d9c6b765d4e192d2c667a208354d65fa3811ce317e1bd769e3d69e309b22cc18ab9
-
SSDEEP
12288:yl7IPAt6Pwh1d4Z2xk4rfQIXd+nyBfg80ae88Z1ZQ3Ahg:YIot6Pw949IQIXayBfgbaetdeKg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/kg.exe
Files
-
bfg_keygen_2024.02.18.rar.rar
-
GameList.TxT
-
how to search a game_1.bmp
-
how to search a game_2.bmp
-
how to use it.bmp
-
how to use it2.bmp
-
kg.exe.exe windows:4 windows x86 arch:x86
68e4b12b169651f686abda2d86eede00
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DialogBoxParamA
RegisterHotKey
LoadIconA
SendMessageA
GetDlgItem
wsprintfA
SetWindowTextA
GetParent
GetActiveWindow
UnregisterHotKey
UpdateWindow
EndDialog
GetDlgItemTextA
SendDlgItemMessageA
SetDlgItemTextA
OpenClipboard
IsClipboardFormatAvailable
GetClipboardData
CloseClipboard
kernel32
LoadLibraryA
GetProcAddress
FreeLibrary
RtlZeroMemory
lstrlenA
ReadProcessMemory
WriteProcessMemory
ResumeThread
Sleep
GetThreadContext
SuspendThread
lstrcatA
GlobalFree
CreateProcessA
SetThreadContext
VirtualAlloc
GetModuleHandleA
GetPrivateProfileIntA
ExitProcess
GlobalAlloc
CreateFileA
GetFileSize
ReadFile
CloseHandle
WriteFile
FlushFileBuffers
comdlg32
GetOpenFileNameA
msvcrt
malloc
memset
memcpy
_putenv
time
free
sprintf
strchr
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 237B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 262KB - Virtual size: 266KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
options.ini