Behavioral task
behavioral1
Sample
KeyGen.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
KeyGen.exe
Resource
win10v2004-20240508-en
General
-
Target
KeyGen.exe
-
Size
78KB
-
MD5
f940276350978aa8cd6e39458c4d232a
-
SHA1
a3d5fd606ae9f1840e31a146be671d0466d37b6c
-
SHA256
10a6c1c5e8ec4d1bb3f7e9d8931982f26fd8e171ba8561aebb05e3986e1fec3e
-
SHA512
b6e6deaf68c9af9a3bbdc35669860731dd0b14637d497f1b0366f79013da8ff8eb94259faa1de38cf55a5b7d0e1e65eeec38d1a7a8fa1994b7f197f35480bc73
-
SSDEEP
1536:ChA3KXzkZgW/NqJ6DlXVGNg3Qzikym1BQWanouy8c4obDd1Tfp:C23KXIgWFqJ6xXVYaQmk11mWCout7I/R
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource KeyGen.exe
Files
-
KeyGen.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE