Keygen-CORE[.]exe | Triage

Sharing

General

Target

Keygen-CORE.exe
Size

117KB
MD5

459c2c947badbd84028018d072996445
SHA1

f80cec10cf26f1b3fcb7abed7429a4ec1749c948
SHA256

96d3de7df42dc3837e52aec44c17984fd19b248beeb865bf3ea7dc96ebfde7ab
SHA512

a8b4cc23f70d84f07a643bd58dcc0b58c4bc52f320966ff3332049949a2031d39061222b505a2c9f18484d7c56fa44ca962f07b88d9e96c50d756f419cf40c98
SSDEEP

3072:76l1NdWGQTXxCWeLyiGtC5TEE3wLZGWRPbeSLsLiQ/r3t:7UsGQTXaJGt03wLZGSPbeSLsLiQrt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Keygen-CORE.exe

Files

Keygen-CORE.exe
.exe windows x86

091f6c7c6bf5506030cf9d7e9c8d5eee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

VariantChangeTypeEx

gdi32

TextOutA

winmm

waveOutGetPosition

Sections

CODE
Size: 108KB - Virtual size: 620KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE