Static task
static1
Behavioral task
behavioral1
Sample
keygen.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
keygen.exe
Resource
win10v2004-20221111-en
General
-
Target
PL.SQL.Developer.15.rar
-
Size
297KB
-
MD5
386d94754402b8b1b7204f5ff33134d1
-
SHA1
aa27784cab19a71d824f08b8c132615ae2cb0bc8
-
SHA256
fb2eb80e18d6f43fd6476be726648c7c5ab801bf0302d025fcb89907066e2ca2
-
SHA512
33fe11c8551ccc5b61ada128dbe81f0fb5e009b5da40461ae078835e629ffa2d56ebcf4c6167ad7132a26f7f9c4c9bf7b5f70898186cd5bbfec30b91cfa84c13
-
SSDEEP
6144:s8Fp5RtAKVZpSGJHvJx0z+8UnMCIh9ohWFffBgF0xfk1O:FFzAmZpZYz+8B96WxfBgF0Fl
Malware Config
Signatures
Files
-
PL.SQL.Developer.15.rar.rar .zip
-
KeyGen-ZWT.zip.zip
-
file_id.diz
-
keygen.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
asw1234 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
234sdafa Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
readme.txt
-
zwt.nfo