Keygen[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Keygen.exe
Size

48KB
MD5

44ecb1a243a7f3fed3488d28232ef513
SHA1

4534edf289d4beeb100c74cba44422747476a27c
SHA256

cf6f76c656a3b9cadae0f11a98587933808c968d9b3858dcb9d43d411349ac6c
SHA512

e3a619648800139832ee207491719562f6f0d50f4c8e000dbc55b42d1ca20aa1b588dfa864617fd79e044cb242d01e4f2b1f51ab20536a9b04237f13550cd7ab
SSDEEP

768:QEPAYwIzfDZVZkCNQ45tGaoFqg4E3xEGttshzfkHWE:QExwMZrNQ4rnoZF3hshzc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Keygen.exe

Files

Keygen.exe
.exe windows x86

bde90e42a314f9696708d01596b0f404

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleA
LocalAlloc
Sleep
LocalFree
CreateThread
CloseHandle

user32

GetWindowRect
GetDesktopWindow
SendMessageA
EndDialog
GetWindowTextA
SetWindowPos
LoadIconA
GetDlgItem
DialogBoxParamA
SetWindowTextA
wvsprintfA

winmm

waveOutGetPosition
waveOutOpen
waveOutPrepareHeader
waveOutReset
waveOutUnprepareHeader
waveOutWrite
waveOutClose

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ