Static task
static1
Behavioral task
behavioral1
Sample
keygen.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
keygen.exe
Resource
win10v2004-20230220-en
General
-
Target
keygen.exe
-
Size
477KB
-
MD5
ba4f7b11742d6b071fcbfcbfbdd95937
-
SHA1
d261acb8af79faed3b5eca9c69390891225b5e19
-
SHA256
9c0cc68d84685fb8e37dda58af9111ce70c25bc82b24716c72adaf27a3728a7e
-
SHA512
7c6d5938676327e32757799ab4b16f794d8a4a4b27bf19194d8327cd58665c9833d560542ec2cd2928950fafcd5fb99cc3ad697647c6ec1bb79c0bf6af2f6154
-
SSDEEP
12288:C0nFDOAkjA0ce3XDYASfjZB7o1ZHQ+LFFYk3M4HhrhNz:C0nN6ceBSXoPHQQFekVhrH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource keygen.exe
Files
-
keygen.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
FOOQO3eG Size: - Virtual size: 556KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
LeJHFxPZ Size: 428KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE