9c8eff7bd01bb7d5a8805110026956887514634aa1817f330136f8bcf3d5011b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9c8eff7bd01bb7d5a8805110026956887514634aa1817f330136f8bcf3d5011b
Size

39KB
MD5

384715ef4e88d0026b245d8baaed68c0
SHA1

045e7d173469eee0c667673083bc1966531ede13
SHA256

9c8eff7bd01bb7d5a8805110026956887514634aa1817f330136f8bcf3d5011b
SHA512

e1f63736a390d3c91fe1412c923cfc1fa61edfc82961b2ab3d13e87ddda607736164bde6af6d5912fbf0a13826a0bc66c5f53c3fd879cdd23d198c9b520352c7
SSDEEP

768:euiTF5lMSUkKH5dTp0AlAxny26MW8ofw4Q5C8vOgcxKveuNzVR0zcDwI/:eJF5lMfkuTixyxMW8of05HvOgcONzVyQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/keygen.exe

Files

9c8eff7bd01bb7d5a8805110026956887514634aa1817f330136f8bcf3d5011b
.zip
VMware Workstation Pro 16 v16.2.0.18760230/Keygen-v16.rar
.rar
amped.nfo
file_id.diz
keygen.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VMware Workstation Pro 16 v16.2.0.18760230/VMware-workstation-V16下载地址.txt
VMware Workstation Pro 16 v16.2.0.18760230/使用说明.txt