keyfinder[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

keyfinder.exe
Size

787KB
MD5

4187dfaf99e89cc211eb3f2bf6af81ca
SHA1

55fc92048228aaab920a9d164dff7ba92117ec82
SHA256

3cf64f198a3a58f608639823ae689cbff75dc475996cbd14ebd16550d9886f1c
SHA512

9ffc1e6f76ad4826abe7ece3dcf0a59c49564f03bb3ebde9a11d8dbaeb5f870cb5d9affcebd001ffe6d84aa6bd34fa8f94851de4d8f2a22e1941002e49b86d61
SSDEEP

12288:XQx8br+SgmYjgVobXcJTEjK25I3yWwR4C0Ecnb/Lxh+khPg85:PfQjUT/25a87inxIX85

Score

1^/10

Malware Config

Signatures

Files

keyfinder.exe
.exe windows:4 windows x86 arch:x86

Code Sign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28/07/2020, 00:00

Not After

18/03/2029, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:ff:6b:ef:3a:31:67:7c:cb:91:ee:e0
Certificate

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

21/04/2021, 20:07

Not After

19/11/2022, 15:03

Subject

CN=One Up Ltd,O=One Up Ltd,L=Limassol,ST=Limassol,C=CY

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28/07/2020, 00:00

Not After

18/03/2029, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:ff:6b:ef:3a:31:67:7c:cb:91:ee:e0
Certificate

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

21/04/2021, 20:07

Not After

19/11/2022, 15:03

Subject

CN=One Up Ltd,O=One Up Ltd,L=Limassol,ST=Limassol,C=CY

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

60:f7:f4:14:e4:1a:41:5a:c5:3c:39:53:d6:8b:37:a5:cb:0a:66:bd:68:c8:bd:10:d1:44:b6:eb:87:e0:78:43
Signer

Actual PE Digest

60:f7:f4:14:e4:1a:41:5a:c5:3c:39:53:d6:8b:37:a5:cb:0a:66:bd:68:c8:bd:10:d1:44:b6:eb:87:e0:78:43

Digest Algorithm

sha256

PE Digest Matches

true

5c:ea:68:fd:bb:2a:3a:99:39:b8:49:d8:8d:22:63:d7:0a:1f:71:35
Signer

Actual PE Digest

5c:ea:68:fd:bb:2a:3a:99:39:b8:49:d8:8d:22:63:d7:0a:1f:71:35

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 587KB - Virtual size: 586KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54Certificate

Extended Key Usages

Key Usages

0a:ff:6b:ef:3a:31:67:7c:cb:91:ee:e0Certificate

Extended Key Usages

Key Usages

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47Certificate

Extended Key Usages

Key Usages

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54Certificate

Extended Key Usages

Key Usages

0a:ff:6b:ef:3a:31:67:7c:cb:91:ee:e0Certificate

Extended Key Usages

Key Usages

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47Certificate

Extended Key Usages

Key Usages

60:f7:f4:14:e4:1a:41:5a:c5:3c:39:53:d6:8b:37:a5:cb:0a:66:bd:68:c8:bd:10:d1:44:b6:eb:87:e0:78:43Signer

5c:ea:68:fd:bb:2a:3a:99:39:b8:49:d8:8d:22:63:d7:0a:1f:71:35Signer

Headers

File Characteristics

Sections

CODE Size: 587KB - Virtual size: 586KB

DATA Size: 8KB - Virtual size: 8KB

BSS Size: - Virtual size: 5KB

.idata Size: 10KB - Virtual size: 9KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 40KB - Virtual size: 39KB

.rsrc Size: 129KB - Virtual size: 129KB

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

0a:ff:6b:ef:3a:31:67:7c:cb:91:ee:e0
Certificate

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Certificate

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

0a:ff:6b:ef:3a:31:67:7c:cb:91:ee:e0
Certificate

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Certificate

60:f7:f4:14:e4:1a:41:5a:c5:3c:39:53:d6:8b:37:a5:cb:0a:66:bd:68:c8:bd:10:d1:44:b6:eb:87:e0:78:43
Signer

5c:ea:68:fd:bb:2a:3a:99:39:b8:49:d8:8d:22:63:d7:0a:1f:71:35
Signer

CODE
Size: 587KB - Virtual size: 586KB

DATA
Size: 8KB - Virtual size: 8KB

BSS
Size: - Virtual size: 5KB

.idata
Size: 10KB - Virtual size: 9KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 40KB - Virtual size: 39KB

.rsrc
Size: 129KB - Virtual size: 129KB