chili-keygen[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

chili-keygen.exe
Size

78KB
MD5

1cedcfcd8f6da12c34467464f3fac99e
SHA1

de189aa77c7e64d0e38b74d8e1a9df708695d117
SHA256

1abe22134babb3a983e23c33e806bfa3b73b89618e95f1e80a5ee348801269bc
SHA512

ac7ed4ece4492258c627c9f4973a4223d9e986d5abac427d3d18fa347d19a8fac091139c2f2112bbae40f42969d052bf9a5a293402ca94553f49f6d1fd318cb9
SSDEEP

1536:TfKlkJ1L/UfnRumnpHCpmIYaJAiCdZV+3rPf1EjSUPd891mZe2eWq4fVA1UuKQ:TiExSfpHDIY2AiCdiL1hU1DZYF4VsU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
chili-keygen.exe

Files

chili-keygen.exe
.exe windows x86

8c8b78ff4a5bb694ae1b0a40cec3dcdf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

LoadIconA

gdi32

DeleteObject

winmm

waveOutOpen

Sections

.MPRESS1
Size: 68KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE