Static task
static1
Behavioral task
behavioral1
Sample
keygen.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
keygen.exe
Resource
win10v2004-20230703-en
General
-
Target
keygen.exe
-
Size
9KB
-
MD5
ba485d810799ca2fb9f88508b985962f
-
SHA1
c84da1dd7605c026c5e1f3d450b14e83f57b4d04
-
SHA256
9f8fe6ba18e7f9b2df87cbaa0c9331b79b1a5293328d45597ba3b4b22cad0402
-
SHA512
3e1c1796f0570dc066d9f919897793ffce5b9b0c13c38be1cfbaa37b2e3a6570ffae47c6803e705dd3022a05f4071da956db7e2ca572111145dc68fc36240711
-
SSDEEP
192:nk9nqor7tzDQRDpZJemQqwi3t2js2dN2On4fQ:kHr50vJifq2js2P2k4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource keygen.exe
Files
-
keygen.exe.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
CODE Size: 5KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE