KeyGenMe[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
KeyGenMe.exe
Size 3.5MB
Sample260711-nq1ztsbs8x
SHA256 08f9aaafdd0213d40f243835ff33dbb46015790a20a29fd2d76ccf74c978147f
MD5 1932496a394d899f3d9376b80a996b17
SHA1 6754445ee738b501710c3571d4f89d433e1b7b24
SHA512 17113f24af2645af5b60c226c3f4ae3a2a23f0fa02f5214411d4767b647f3cc1dcac731adcd40207352bfc8bd959372c6976f3ecea3e64b7de8bbaf38feaeb68
SSDEEP 24576:iaSW7QcNgGwMZs0VA6kPe0R2Jupe4YCtlMg5g6T32:iaSdcyGDZs0VA6kPe0Rvpe4nlMgK43
TLSH
T1A606F79E60E37C4A180E4779EF2D8AFC7A8A7CD04C6997A05024EF5600362B5D9F7B47
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KeyGenMe.exe

File Explorer

KeyGenMe.exe

.exe 3.5MB

KeyGenMe.exe

IMPHASH bcfcd6f1866ae148c53973901015c04d
SHA256 08f9aaafdd0213d40f243835ff33dbb46015790a20a29fd2d76ccf74c978147f
MD5 1932496a394d899f3d9376b80a996b17
SHA1 6754445ee738b501710c3571d4f89d433e1b7b24
SHA512 17113f24af2645af5b60c226c3f4ae3a2a23f0fa02f5214411d4767b647f3cc1dcac731adcd40207352bfc8bd959372c6976f3ecea3e64b7de8bbaf38feaeb68
SSDEEP 24576:iaSW7QcNgGwMZs0VA6kPe0R2Jupe4YCtlMg5g6T32:iaSdcyGDZs0VA6kPe0Rvpe4nlMgK43
TLSH
T1A606F79E60E37C4A180E4779EF2D8AFC7A8A7CD04C6997A05024EF5600362B5D9F7B47
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4368

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

api-ms-win-crt-private-l1-1-0

__C_specific_handler memcpy

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv __p__acmdln _cexit _configure_narrow_argv _crt_atexit _exit _fpreset _initialize_narrow_environment _initterm _initterm_e _set_app_type _set_invalid_parameter_handler abort exit signal

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-utility-l1-1-0

rand srand

api-ms-win-crt-string-l1-1-0

strlen strncmp

api-ms-win-crt-convert-l1-1-0

strtoul

user32

BeginPaint CreateWindowExA DefWindowProcA DispatchMessageA DrawTextA EndPaint FillRect GetMessageA GetSystemMetrics GetWindowRect GetWindowTextA InvalidateRect KillTimer LoadCursorA MessageBoxA PostQuitMessage RegisterClassA SetTimer TranslateMessage

gdi32

BitBlt CreateCompatibleBitmap CreateCompatibleDC CreateFontA CreateSolidBrush DeleteDC DeleteObject GetStockObject SelectObject SetBkMode SetPixel SetTextColor

kernel32

DeleteCriticalSection EnterCriticalSection GetLastError GetModuleHandleA GetStartupInfoA InitializeCriticalSection LeaveCriticalSection SetUnhandledExceptionFilter Sleep TlsGetValue VirtualProtect VirtualQuery

winmm

PlaySoundA

api-ms-win-crt-environment-l1-1-0

__p__environ

api-ms-win-crt-heap-l1-1-0

calloc free malloc _set_new_mode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-multibyte-l1-1-0

_ismbblead

Name

.text

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3.5MB

Virtual Size

3.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1024B

Virtual Size

612B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

112B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

KeyGenMe.exe

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

user32

gdi32

kernel32

winmm

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-multibyte-l1-1-0

generic