keymaker[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

keymaker.rar
Size

10KB
MD5

0e525331f7ccae5a6c71deb04e708f06
SHA1

a88b2443d22ae332b1e0796d36402359d6281921
SHA256

921e632f3c031b4289095199fb23d498cbe81cc1f055a7263f4a9fe48710c37f
SHA512

266f90002f735367b9cc28654f7595168a05d76e8bb1da3193308045ffcd8fff27bb5511c8045b7a6920286e069ce0823ad68d24d6161fc3de440fbf929ba1b8
SSDEEP

192:mkMzFgmJAQsa6Bq3a5h0QtKEXMaElAjiIKGTOPr1LWqWMJT9G5Q+5cJ3LR:mTLCQ6ngQtlMdAmIKGTO5PJJT9G5Q+cr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/keymaker.exe

Files

keymaker.rar
.rar
keymaker.exe
.exe windows:4 windows x64 arch:x64

5de9db21468d7be2461d9708711c1dea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

memset
memmove
memcpy
_localtime64
_mktime64
wcslen
wcscpy
wcsncpy
strlen
wcscmp
malloc
free

kernel32

GetModuleHandleW
HeapCreate
HeapDestroy
ExitProcess
CloseHandle
InitializeCriticalSection
GetCommandLineW
HeapAlloc
HeapFree
WriteFile
CreateFileW
SetFilePointer
HeapReAlloc
GetLocalTime
AllocConsole
GetStdHandle
GetConsoleScreenBufferInfo
SetConsoleCtrlHandler
SetConsoleTitleW
FlushFileBuffers
SetConsoleMode
ReadConsoleW
EnterCriticalSection
ReadFile
GetLastError
LeaveCriticalSection
WriteConsoleW
MultiByteToWideChar
WideCharToMultiByte

user32

CharUpperW

Sections

.code
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE