Static task
static1
General
-
Target
key.exe
-
Size
158KB
-
MD5
d9b8ad6d54f59530f3caa515cfbfe34c
-
SHA1
e10289b897ff5e7d56e49bebfa9b7d5ccac7e219
-
SHA256
35e17556e74bfa76d73ac09914dddd14c164329df24448b2e18e97159a0f1867
-
SHA512
b768cefe936894c2f90698d7db600baaabc52cca39b9c731f1b9a2585752d0fc047915f62cd606c63c7baeb02c4f3abaf73aa9dafb78c36f70db3f58184638fb
-
SSDEEP
3072:gZXZhgkpwHBuBh8YIabidYd2DfCyIlQeLlVJJJ655ZZ4OL2mY0C/Bu:CXZakpwHBMKCbHlpLlVJJJ655ZZ4OL2O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource key.exe
Files
-
key.exe.exe windows:4 windows x64 arch:x64
8bed7e4f2c3353d6f6fd427ba1a3d517
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeleteCriticalSection
EnterCriticalSection
GetEnvironmentVariableW
GetLastError
GetStartupInfoA
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte
__C_specific_handler
msvcrt
___lc_codepage_func
___mb_cur_max_func
__argv
__initenv
__iob_func
__getmainargs
__lconv_init
__set_app_type
_acmdln
__setusermatherr
_amsg_exit
_cexit
_commode
_ctime64
_fmode
_errno
memcpy
memset
srand
_initterm
_lock
_mktime64
_onexit
_time64
_unlock
abort
calloc
exit
fclose
fgets
fopen
fprintf
fputc
fread
free
fseek
fwrite
getc
islower
isspace
isupper
isxdigit
localeconv
malloc
putc
putchar
rand
realloc
signal
strchr
strcpy
strerror
strlen
strncmp
strtol
strtoul
tolower
ungetc
vfprintf
wcslen
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 164B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ