Static task
static1
Behavioral task
behavioral1
Sample
keymake.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
keymake.exe
Resource
win10v2004-20240226-en
General
-
Target
c90a98c3b38805958974e17cb1ec8767
-
Size
110KB
-
MD5
c90a98c3b38805958974e17cb1ec8767
-
SHA1
ffaeffae85e47dd180a6ab57ec738fae0a3e9711
-
SHA256
4643c6736d649916db4452516657d5a0c46d81052842e3a1303320d2510a0941
-
SHA512
fd35d4b7aa503d43e73e96a412fc87ebc0873e2289bbcbb701887de8a86017ea9b48c42312c4dd3a5ca1b8151628b2336747e8a818020ceca18be81717e6fffa
-
SSDEEP
1536:30CvtftbAn7xr+PFrzY5gvg6AVsCneufixYL6C7aEFfraiMPYBa1TFdfvAX9IdXY:kGm7t+tHlv+WC7iCFfriQ4boNKcU3mB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/keymake.exe
Files
-
c90a98c3b38805958974e17cb1ec8767.rar
-
keymake.exe.exe windows:4 windows x86 arch:x86
f8a0a8192d59917eda52e3d603237b3e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegCreateKeyA
RegCloseKey
RegSetValueExA
comctl32
ord14
ord17
ImageList_Destroy
ImageList_Create
ord13
ImageList_AddIcon
gdi32
GetObjectA
GetPixel
GetStockObject
LineTo
MoveToEx
RoundRect
GetDeviceCaps
SetBkColor
SetBkMode
SetStretchBltMode
SetTextColor
StretchBlt
ExtTextOutA
ExtFloodFill
Ellipse
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePen
CreateFontIndirectA
CreateFontA
CreateCompatibleDC
CombineRgn
SelectObject
BitBlt
kernel32
MulDiv
CloseHandle
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpiA
lstrcmpA
lstrcatA
WriteFile
WinExec
WideCharToMultiByte
Sleep
SetFilePointer
SetCurrentDirectoryA
RtlZeroMemory
RemoveDirectoryA
ReadFile
Beep
HeapFree
HeapAlloc
GlobalLock
GlobalFree
GlobalAlloc
GetTempPathA
GetShortPathNameA
GetProcessHeap
GetModuleHandleA
GetModuleFileNameA
GetFileSize
GetCommandLineA
ExitProcess
DeleteFileA
CreateFileA
CreateDirectoryA
oleaut32
SysAllocStringByteLen
SysFreeString
shell32
ShellExecuteA
ExtractIconA
DragQueryFileA
Shell_NotifyIconA
user32
GetWindowLongA
GetWindowModuleFileNameA
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
InflateRect
InsertMenuItemA
InvalidateRect
IsClipboardFormatAvailable
IsMenu
IsRectEmpty
IsWindowEnabled
IsWindowVisible
IsZoomed
KillTimer
LoadAcceleratorsA
LoadBitmapA
LoadCursorA
LoadIconA
DeleteMenu
LoadMenuA
MapWindowPoints
MessageBeep
MessageBoxA
ModifyMenuA
MoveWindow
OffsetRect
OpenClipboard
PostMessageA
PostQuitMessage
RedrawWindow
RegisterClassExA
RegisterWindowMessageA
ReleaseCapture
GetSubMenu
ScreenToClient
SendDlgItemMessageA
SendMessageA
SetCapture
SetCursor
SetDlgItemTextA
SetFocus
SetForegroundWindow
SetMenuItemInfoA
SetRect
SetRectEmpty
SetTimer
SetWindowLongA
SetWindowPos
SetWindowRgn
SetWindowTextA
ShowScrollBar
GetWindowDC
TrackPopupMenu
TranslateAcceleratorA
TranslateMessage
UpdateWindow
WindowFromPoint
GetScrollInfo
GetParent
GetMessageA
GetMenuStringA
GetMenuState
GetMenuItemRect
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
GetMenu
GetDlgItemTextA
GetDlgItem
GetDlgCtrlID
GetDC
GetCursorPos
GetClientRect
GetClassNameA
GetActiveWindow
FindWindowA
FillRect
EnumWindows
EnumChildWindows
EndPaint
EndDialog
EndDeferWindowPos
EnableWindow
EnableMenuItem
DrawTextA
DrawStateA
DrawIconEx
DrawIcon
DrawEdge
DispatchMessageA
DialogBoxParamA
DestroyWindow
DefWindowProcA
CreateWindowExA
CreatePopupMenu
CreateDialogParamA
CopyRect
CloseWindow
CloseClipboard
wsprintfA
AppendMenuA
BeginDeferWindowPos
BeginPaint
GetWindow
GetSystemMetrics
GetSystemMenu
ShowWindow
GetSysColor
DestroyMenu
ReleaseDC
DestroyAcceleratorTable
CallWindowProcA
CheckRadioButton
LoadImageA
comdlg32
ChooseFontA
GetSaveFileNameA
GetOpenFileNameA
ole32
OleInitialize
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 134KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE