Keyser Cracked(1)[.]rar

Sharing

Copy URL Twitter E-mail

General

Target
Keyser Cracked(1).rar
Size 3.0MB
Sample260905-knw2ba1aqa
SHA256 63cfdd703e324da29eba0e7fb25b2122320ec0fd9f7cdeb77ea30a8cac06a52c
MD5 dd4703419e237e0a76b9209043cc79a0
SHA1 2ed0f7461e8694851733b62536a8d25deb441b34
SHA512 257efeff9c1692104aded47f0b1da9707aca5fdbd1e4560483674b815ef9ee018a16e540c6cb3de3d6cb979044ad6179054a49cbb80dbaff08d80f9ee1aecb0f
SSDEEP 49152:x0jWu6VWhDf82MqTzj/D+YwL5uU79emqGsFzuv4ggO0W8E8zCEYsX4dUNQg8jBsn:IFtfT7yYJU79eSa+gjjMOyJOTQKeRs
TLSH
T147E533B03022651C65C557C203CB9F03F2461E6FC9FCA4E9724249E646AEECAF6DE674
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Keyser Cracked.exe

File Explorer

Keyser Cracked(1).rar

.rar 3.0MB
Keyser Cracked.exe

.exe 3.0MB

Keyser Cracked(1).rar

SHA256 63cfdd703e324da29eba0e7fb25b2122320ec0fd9f7cdeb77ea30a8cac06a52c
MD5 dd4703419e237e0a76b9209043cc79a0
SHA1 2ed0f7461e8694851733b62536a8d25deb441b34
SHA512 257efeff9c1692104aded47f0b1da9707aca5fdbd1e4560483674b815ef9ee018a16e540c6cb3de3d6cb979044ad6179054a49cbb80dbaff08d80f9ee1aecb0f
SSDEEP 49152:x0jWu6VWhDf82MqTzj/D+YwL5uU79emqGsFzuv4ggO0W8E8zCEYsX4dUNQg8jBsn:IFtfT7yYJU79eSa+gjjMOyJOTQKeRs
TLSH
T147E533B03022651C65C557C203CB9F03F2461E6FC9FCA4E9724249E646AEECAF6DE674
MD5 SHA1 SHA512 SSDEEP TLSH

Keyser Cracked.exe

IMPHASH e81d90b230abc81b286482b9dba12e35
SHA256 30bf02fe40e1d5ddef5bff6000fbf680172d6977dde11c03ae50ce36742a6c98
MD5 ffe1721e90dd4bd26f3e43a1249087db
SHA1 6a301521e7110540dc8a10c1abdd7e37daa871fa
SHA512 03630a0947a2287df03e255253a16ba815bf838b3ee8fa4ed828d511159777c1bb7717d77075e1fb5b9e633299c764f1e8f5326610659c390cda154291cd554e
SSDEEP 49152:nIUIsPAmEnzgA++NVlH0kpa8/Cg82NV9q3d+anVqamiaSJbRVJUpqAotxa:nIAIRnz7++NVtl/CghNV9NNxaRekx
TLSH
T1FEE533538A3089C5F7D5B7FA00F3C117930E7A2943AA05C76A255EF422BB7E4B273156
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.0MB

Virtual Size

3.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

512B

Virtual Size

240B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.CRT

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Keyser Cracked(1).rar

Keyser Cracked.exe

ntdll

kernel32

generic