keylogge1r[.]exe | Triage™

Resubmissions

27/06/2026, 03:50

260627-ed6vwagw616

27/06/2026, 02:49

260627-da734ahs4l6

Sharing

Copy URL Twitter E-mail

General

Target
keylogge1r.exe
Size 263KB
Sample260627-da734ahs4l
SHA256 c9e5bcc2616f9c5b0679a97cd6b8b4c86366ac851382b1ec2287b090428ea426
MD5 d7fd27887ff26965a3fe8268c63ae017
SHA1 67381a1b93fe25be1bbe60c47fe74e87b0c8a212
SHA512 a86d2e1fd0c9bedef6f78ccdf484224e7c6ba5aeace8ce707259e0144d7c1210a6db579194236ac5513a6ad761987b76164f870e4c6438b7631c57b64f703070
SSDEEP 3072:/zdxjrKbM3srXGMqLSbdUZLMLojGUD6X6YcJOjWR3S0418PWZ8m1Xc4QdyumtExc:/Jxj2M8j1st6X6Ych3UGeVG85
TLSH
T138446CC5FBC69CEADA054639899B83793738F6D016839F17093873311E27AD0BD8761A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
keylogge1r.exe

File Explorer

keylogge1r.exe

.exe 263KB

keylogge1r.exe

IMPHASH 6aa5f458412d4cf3a3fbe555dd3b26b6
SHA256 c9e5bcc2616f9c5b0679a97cd6b8b4c86366ac851382b1ec2287b090428ea426
MD5 d7fd27887ff26965a3fe8268c63ae017
SHA1 67381a1b93fe25be1bbe60c47fe74e87b0c8a212
SHA512 a86d2e1fd0c9bedef6f78ccdf484224e7c6ba5aeace8ce707259e0144d7c1210a6db579194236ac5513a6ad761987b76164f870e4c6438b7631c57b64f703070
SSDEEP 3072:/zdxjrKbM3srXGMqLSbdUZLMLojGUD6X6YcJOjWR3S0418PWZ8m1Xc4QdyumtExc:/Jxj2M8j1st6X6Ych3UGeVG85
TLSH
T138446CC5FBC69CEADA054639899B83793738F6D016839F17093873311E27AD0BD8761A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

RegCloseKey RegOpenKeyExW RegSetValueExW

kernel32

CloseHandle CreateDirectoryW CreateFileW CreateMutexW CreateThread DeleteCriticalSection DeleteFileW EnterCriticalSection FlushFileBuffers GetFileSize GetFileSizeEx GetLastError GetLocalTime GetModuleFileNameW GetProcessHeap GetStartupInfoW GlobalLock GlobalUnlock HeapAlloc HeapFree InitializeCriticalSection IsDBCSLeadByteEx LeaveCriticalSection MoveFileW MultiByteToWideChar ReadFile SetFileAttributesW SetFilePointer SetUnhandledExceptionFilter Sleep TlsGetValue VirtualProtect VirtualQuery WideCharToMultiByte WriteFile

msvcrt

__C_specific_handler ___lc_codepage_func ___mb_cur_max_func __iob_func __set_app_type __setusermatherr __wgetmainargs __winitenv _amsg_exit _cexit _commode _errno _fmode _initterm _onexit _vsnwprintf_s _wcmdln abort calloc exit fprintf fputc free fwrite localeconv malloc memcpy memset signal strerror strlen strncmp swprintf_s vfprintf wcscmp wcscpy_s wcslen

user32

CallNextHookEx CloseClipboard CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageW GetClipboardData GetForegroundWindow GetKeyState GetKeyboardState GetMessageW GetWindowTextW IsClipboardFormatAvailable KillTimer OpenClipboard PostQuitMessage RegisterClassExW SetTimer SetWinEventHook SetWindowsHookExW ToUnicode TranslateMessage UnhookWinEvent UnhookWindowsHookEx

wininet

HttpAddRequestHeadersW HttpOpenRequestW HttpQueryInfoA HttpSendRequestA InternetCloseHandle InternetConnectW InternetCrackUrlW InternetOpenW InternetSetOptionW

Name

.text

Size

33KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

208B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

120B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

71KB

Virtual Size

71KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/31

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

27KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/57

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/70

Size

1024B

Virtual Size

925B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/81

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/97

Size

30KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/113

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

keylogge1r.exe

advapi32

kernel32

msvcrt

user32

wininet

generic