vs_activator_tbe[.]exe | Triage

Sharing

General

Target

vs_activator_tbe.exe
Size

1.9MB
MD5

fa7442b189cfe37414a761ea70d407d5
SHA1

9d302025dfe628d7294b6e099a0b80daa2f6bac9
SHA256

7d78b410a6b2fe2ed0e1a8df1a3fad6da960c7c9fe9880c1ec2ff5bbcb2d29d7
SHA512

314ffb6f24eee67a2cc0f767f954de02f6f0ed80410be834eea8949253dfee6a7d35c35e4e137125be5c5c0bff4996ea3b0a856adf83779df3d8f02366330247
SSDEEP

49152:CdBDT5FMvT4cuy+yanmOTxyOkMRewcZ9PeENgz4:Cjrx9ykrlyOFRenZVNgz4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Device/HarddiskVolume4/oldlaptop/Microsoft Visual Studio 2015.1 Enterprise 14.0.24720 (x86x64)/Crack/vs_activator_tbe.exe

Files

vs_activator_tbe.exe
.zip

Password: S@ndb0x!2023@@
Device/HarddiskVolume4/oldlaptop/Microsoft Visual Studio 2015.1 Enterprise 14.0.24720 (x86x64)/Crack/vs_activator_tbe.exe
.exe windows x86

Password: S@ndb0x!2023@@

baa93d47220682c04d92f7797d9224ce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

Size: 7KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lglfyvjt
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pbbjtfwl
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
manifest.json