Activator[.]unp[.]exe | Triage

Sharing

General

Target

Activator.unp.exe
Size

309KB
MD5

697dc248f68e87fa163e7d33b1dc81ab
SHA1

470247390de7421f2d2a97ded9a3f1cba6fe704e
SHA256

360bcb54517b032282a397c216416fd3e9efbd58754a907e07b941c3cfde0e30
SHA512

4ab9e56bb306d61b7168858e1a384218153288009cc0a8c72bfeb89cbddc3584d1c759edc006e7b51632607e9c87c6f82cd0613cd5c6d87b5f217253728ff475
SSDEEP

6144:eOdrFM9Y0gh0p7DJ5cAT4HUV39zY1YfAh4Ua/apTBJ:eO09YH2ppTV39Noh4Ua/apTr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Activator.unp.exe

Files

Activator.unp.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 249KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ