Resubmissions
01-05-2024 05:18
240501-fzffgsba83 3Static task
static1
Behavioral task
behavioral1
Sample
Keygen.and.Patch-BTCR_20240302/Keygen.and.Patch.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Keygen.and.Patch-BTCR_20240302/Keygen.and.Patch.exe
Resource
win10v2004-20240419-en
General
-
Target
Keygen.and.Patch-BTCR_20240302 (1).rar
-
Size
326KB
-
MD5
1e3c1e0f57e9bf779fbb625434e34841
-
SHA1
3adbff835d2b14776bd3777763f917c36a243219
-
SHA256
acd4e65583b617da0078d718dda5592bfb48a1702c7e188e27d7db75e2e28c81
-
SHA512
06ca0edb27a77e7c03a2d9630e07be430e5fa99e5bc4c2707fd72e3d97356727fc12c40a5c85f92f4d8d0dd563bc3277e13950fa74f34a71727df90976e52282
-
SSDEEP
6144:TYT6m19bsRSZl+uCbMWoVmWoGSs1aAnkxlLWC5nVH7Aavyi674:TYeaYR+FWVokW9EAnkxVrH7Aayi1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Keygen.and.Patch-BTCR_20240302/Keygen.and.Patch.exe
Files
-
Keygen.and.Patch-BTCR_20240302 (1).rar.rar
Password: nsane2024
-
Keygen.and.Patch-BTCR_20240302/Keygen.and.Patch.exe.exe windows:6 windows x86 arch:x86
Password: nsane2024
a94425fb9695d98721016adaed28014e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtQuerySection
RtlUnwind
kernel32
VirtualAlloc
GetModuleFileNameW
LeaveCriticalSection
InitializeCriticalSection
GetLastError
RaiseFailFastException
GetCurrentThread
LoadLibraryW
GetProcAddress
DeleteCriticalSection
GetModuleHandleW
SetThreadPriority
CreateFileW
GetFileAttributesW
GetCurrentThreadId
UnmapViewOfFile
CloseHandle
CreateThread
ExitProcess
CopyFileW
CreateFileMappingW
MapViewOfFile
GetTickCount
ReadFile
HeapFree
ReleaseSemaphore
WriteFile
WaitForSingleObject
CreateEventW
Sleep
GetCurrentProcess
CreateFileA
SetEvent
LoadLibraryA
QueryPerformanceFrequency
HeapReAlloc
ResetEvent
HeapAlloc
SetFilePointerEx
GetProcessHeap
FreeLibrary
CreateSemaphoreW
WideCharToMultiByte
QueryPerformanceCounter
GetStringTypeW
SetStdHandle
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
MultiByteToWideChar
GetCommandLineW
VirtualFree
EnterCriticalSection
SetLastError
SetEndOfFile
VirtualProtect
WriteConsoleW
FlushFileBuffers
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
ReadConsoleW
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
GetFileType
GetStdHandle
GetModuleHandleExW
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
HeapSize
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
RaiseException
EncodePointer
user32
TranslateMessage
RegisterClassW
DestroyIcon
DispatchMessageW
ShowWindow
SetWindowTextW
GetSystemMetrics
SendMessageW
CreateWindowExW
EnumChildWindows
MessageBoxW
CreateIconFromResourceEx
DefWindowProcW
GetMessageW
AnimateWindow
gdi32
SetTextColor
SetBkColor
CreateSolidBrush
GetStockObject
comdlg32
GetOpenFileNameW
gdiplus
GdipDrawImage
GdipDrawImagePointRectI
GdipCreateBitmapFromScan0
GdipDeleteGraphics
GdipCreateBitmapFromHICON
GdipFillRectangleI
GdipGetImageGraphicsContext
GdipCloneBrush
GdipFillEllipseI
GdipFree
GdipCreateFromHWND
GdipCreateSolidFill
GdipDisposeImage
GdipDrawImageRectI
GdipAlloc
GdipDeleteBrush
GdipCloneImage
GdipGetImageHeight
GdipGetImageWidth
GdiplusStartup
GdipDrawImageI
Sections
.text Size: 382KB - Virtual size: 382KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 598KB - Virtual size: 598KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Keygen.and.Patch-BTCR_20240302/btcr.nfo