6ebe8c28db09a42c9807e955c0f2cfa3f4805bf8d36e1f17d14fea1642095357 | Triage

Sharing

General

Target

6ebe8c28db09a42c9807e955c0f2cfa3f4805bf8d36e1f17d14fea1642095357
Size

64KB
MD5

fe5b8be4ff2de93d167724bdf69ec189
SHA1

1eb1de12328f4329c169adadb119676a1d25dad5
SHA256

6ebe8c28db09a42c9807e955c0f2cfa3f4805bf8d36e1f17d14fea1642095357
SHA512

0cf2e160ebd5682cfe584ff89c143b1babc82b79c171df4d5036364c3c1fd67717f46a3d15800d1e9de9f7daa9273bdad390257b3a7b9dd4092b0584abb29c06
SSDEEP

1536:o++Y7Mh/JLMI/HkPeZls0/KwVjpaB8KHzx6fa5V:o+5o/9/aevKwVjpryzESf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/KeyFreeze/KeyFreeze.exe

Files

6ebe8c28db09a42c9807e955c0f2cfa3f4805bf8d36e1f17d14fea1642095357
.zip
KeyFreeze/KeyFreeze.cdf-ms
KeyFreeze/KeyFreeze.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Z:\jitbit\KeyFreeze\KeyFreeze\obj\x86\Release\KeyFreeze.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
KeyFreeze/KeyFreeze.exe.cdf-ms
KeyFreeze/KeyFreeze.exe.manifest
KeyFreeze/KeyFreeze.manifest
KeyFreeze/lock.ico