Static task
static1
Behavioral task
behavioral1
Sample
KeyLoop.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
KeyLoop.exe
Resource
win10v2004-20240802-en
General
-
Target
KeyLoop.exe
-
Size
155KB
-
MD5
a9f8b3babdcc6a2d7db1a974ea5ad507
-
SHA1
a0043ad7bf5238ffcd0982f6d89a31ba18b4ab93
-
SHA256
7abb774c2fd1ec356a6a2b17a3e48cdf1ce998acdcf09dd56727d95721e09644
-
SHA512
201c84055330f899bc9a2a8a44f9791dd4766d9ae6f1a2878a5de5d6d9161f3c28eaa2fee6d0a65a8de82d7cc2313f0bcb591115b89c63b5e14219a196e7c918
-
SSDEEP
3072:N9DapgNg801tinf0X31BQGiTfq+qUQ2W8GhOKDGW6pxIsLdz:MgNg80c01BQGKfqt2jKCW6TIsLd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource KeyLoop.exe
Files
-
KeyLoop.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ