keymapper[.]exe | Triage

Sharing

General

Target

keymapper.exe
Size

350KB
MD5

bae38e899ddcfc2b3cca65e280b51c27
SHA1

5b8a3ce687052c70d3ec524945a70fc4a68f5b5b
SHA256

d466b60b3d445b37356b95a69c7b3d2d708225c110d7ec6d3e42b9ba70ea5b2c
SHA512

c64c2d14453aefa6b83bbec6eefba2fdb9351639daf5c572c3d5451535951873c2730cd0e7f55beabf7f6f951fc5959265d6926582ee5de7df3ba46f9efecfc0
SSDEEP

6144:MaEfMe/4X/g+V2FD3JFi8YaEwHah2uHYpTn81i01CB/TK9rsXc7uJUJnnG3jj:MaLo3K3ahaMcqDJXKuJU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
keymapper.exe

Files

keymapper.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Administrator\Desktop\km.net\obj\Release\KeyMapper.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 342KB - Virtual size: 341KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ