KeyGen[.]exe | Triage

Sharing

General

Target

KeyGen.exe
Size

114KB
MD5

8cebc79d9f5d138f0e1716e0e3a9deac
SHA1

7c8ecbba2caf948f998ff38444edaba63736c592
SHA256

995c1c5649d9059dc7307019095261b02c5b2dd3d5d41955fadc99f8d469a583
SHA512

3118291f8fdab1a4e49095631815ba072d47943d7f2cd3cceab0f4ab1e3857a359406a409185ce847d596bc2c7b76c75a2827f575548e2cad888ac0e3dad32cc
SSDEEP

3072:hXAsX1Piz8zfQFfykEEk8h5EdAS6ApvT5m/6/q:hXDXoz7FK/Eku6rpEs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KeyGen.exe

Files

KeyGen.exe
.exe windows x86

a707613c77d237cac0394d0c3d24a383

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

MessageBoxA

advapi32

RegCloseKey

gdi32

BitBlt

winmm

waveOutOpen

comctl32

InitCommonControls

Sections

.MPRESS1
Size: 91KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE