SecuriteInfo[.]com[.]Riskware[.]Keygenat[.]18232[.]32645[.]exe | Triage

Sharing

General

Target

SecuriteInfo.com.Riskware.Keygenat.18232.32645.exe
Size

140KB
MD5

23b47c9f0bc3c68ac23755d9cde12248
SHA1

0b95ff260d10fe1078bd14e59b8211400bc6de2a
SHA256

5f5cff66c0efeec119a7c03f7b0e536e78198dd2cae87995c2126cd25cddc8d2
SHA512

3d4d6afd56a94beaf1d858df1a8a50444bbf02c37b0a6ae0206ddc560dc45e65a8b262ab134a9308c6d65ba8e3de0350350fecf519a2b0dd412425e6ea5acb8f
SSDEEP

1536:GOqnhdJmn6tplndnamXyjdEBFRnMH+yOIzpHK8pfu2IrT4iyisN3Q+nsdFLHG/qb:qh9d7BQvzyjgQrFLHG/7x7r6uDNt+9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Riskware.Keygenat.18232.32645.exe

Files

SecuriteInfo.com.Riskware.Keygenat.18232.32645.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ