Keygen[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Keygen.zip
Size

3.7MB
MD5

9ba47b5372958876dff27eb7f3cf2723
SHA1

7c0b0d6de0396a67df855268411cbe896f75bddf
SHA256

ba5e7dbe1b87245ecda2849803e80ce0d3cb10fc37657085123b864c6f00804f
SHA512

e814e9d829e3a8d287234f1214ab9d3ce38c0c0490aa9bbe3cbb263825593470787fa7732ee700c7ccfa19c3b4f4ba27f8175de9645b01e8f5e3f9f4beb68361
SSDEEP

98304:WnkYJ3QwYHuKB+3k6Q2Fk8HGXTZryZI7a5Ux0eyz19:Kky3QwYH83kxTZryZI6Ux0Tn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Keygen.exe

Files

Keygen.zip
.zip
Keygen.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ