c:\Users\Admin\Documents\Visual Studio 2013\Projects\Key_Presser_Source - 4.3\Key Presser\obj\Debug\Key Presser.pdb
Static task
static1
Behavioral task
behavioral1
Sample
KeyPresser.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
KeyPresser.exe
Resource
win10v2004-20240802-en
General
-
Target
KeyPresser.exe
-
Size
297KB
-
MD5
78550a06242206491aa94c241499cf01
-
SHA1
0c8ba59398a2c83eaacc943256fe6b01edfccc42
-
SHA256
9d1df4b28baf47793f83e74f2f27f326cd5a16ce5312db8fb1036264c7b4cf26
-
SHA512
dd41991ec13d76fd9d1067c5a99a99820dc2e8655dc4db7db1b6174361af36948d704ec0da8a4dd47ceecbeb104b7ff2dbe5314467695e1d7b4345e58cae8cd9
-
SSDEEP
3072:M6hSankWHy9SClftO4LB420FaankWHy9SClftO4L:M6hSqgdu2tqgd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource KeyPresser.exe
Files
-
KeyPresser.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 165KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ