KeyGeneratorPro[.]exe

General

Target
KeyGeneratorPro.exe
Size 2.8MB
Sample260207-vpylmsfv3c
SHA256 58aecdc00cecc0a2601fbaab0023a0e125d972769fe9a3e04c24e8333ac55400
MD5 204fa4b4ebf3a18e2183462eb0c87da6
SHA1 3f8c0aafeb95c8569c16ed067ebadf420bbb90ce
SHA512 a56adec613e65c1ff0faa41b26637c40d3ab81e7eb39865229e65b6948537d573075b324a99259aa58fed7e2690711674f128f981245e35446f2bd7853e64d52
SSDEEP 49152:YNGZEXurRHg9orH/oKCQOydhYMJucKK6q3MqCc/9kye8:YcauTH/oFQOyrYMkcKzjw9kc
TLSH
T1F9D5AE0AF25349D5CC5BC0BC839B7131EB317D69CB242EDB17918B613E55B806B29F8A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KeyGeneratorPro.exe

File Explorer

KeyGeneratorPro.exe

.exe 2.8MB

KeyGeneratorPro.exe

IMPHASH 1e71a6dfe71991a69e79c1243f113f5d
SHA256 58aecdc00cecc0a2601fbaab0023a0e125d972769fe9a3e04c24e8333ac55400
MD5 204fa4b4ebf3a18e2183462eb0c87da6
SHA1 3f8c0aafeb95c8569c16ed067ebadf420bbb90ce
SHA512 a56adec613e65c1ff0faa41b26637c40d3ab81e7eb39865229e65b6948537d573075b324a99259aa58fed7e2690711674f128f981245e35446f2bd7853e64d52
SSDEEP 49152:YNGZEXurRHg9orH/oKCQOydhYMJucKK6q3MqCc/9kye8:YcauTH/oFQOyrYMkcKzjw9kc
TLSH
T1F9D5AE0AF25349D5CC5BC0BC839B7131EB317D69CB242EDB17918B613E55B806B29F8A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

95124

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

RegEnumValueA RegOpenKeyExA RegQueryInfoKeyA RegCloseKey

shell32

ShellExecuteA ShellExecuteExW SHGetKnownFolderPath ord680

ole32

CoUninitialize CoTaskMemFree CoInitialize

kernel32

SetEndOfFile WriteConsoleW HeapSize SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW CreateFileA WriteFile CloseHandle GetLastError CreateProcessA GetSystemDirectoryA GetModuleFileNameW LoadResource LockResource SizeofResource FindResourceW WideCharToMultiByte LocalFree FormatMessageA GetLocaleInfoEx QueryPerformanceCounter QueryPerformanceFrequency GetSystemTimePreciseAsFileTime WaitForSingleObjectEx Sleep GetCurrentThreadId GetExitCodeThread ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive SleepConditionVariableSRW WakeConditionVariable WakeAllConditionVariable CreateDirectoryW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW SetFileInformationByHandle CreateFile2 AreFileApisANSI GetModuleHandleW GetProcAddress GetFileInformationByHandleEx MultiByteToWideChar EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead GetCommandLineW RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree CreateThread ExitThread FreeLibrary FreeLibraryAndExitThread GetModuleHandleExW GetConsoleCP IsProcessorFeaturePresent GetCurrentProcess ExitProcess TerminateProcess GetStdHandle RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapAlloc HeapFree VirtualProtect LoadLibraryExW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW CreateFileW SetConsoleMode GetNumberOfConsoleInputEvents ReadConsoleInputW PeekConsoleInputA HeapReAlloc IsValidCodePage GetACP GetOEMCP GetCommandLineA RtlUnwind

Name

.text

Size

234KB

Virtual Size

234KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

90KB

Virtual Size

89KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2.5MB

Virtual Size

2.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

KeyGeneratorPro.exe

advapi32

shell32

ole32

kernel32

generic