Universal PopCap KeyGen v1[.]2[.]zip | Triage

Resubmissions

13/11/2023, 06:00

231113-gqnk6sag86 3

Sharing

Copy URL Twitter E-mail

General

Target

Universal PopCap KeyGen v1.2.zip
Size

264KB
MD5

9810613b75b2bb5bd4e12032c918cc0a
SHA1

0461e10fb859903e90c34a89c3dffc080e196c08
SHA256

6170eec1ac7cbe882c86700880e13f5d04035eff663188740fb0dcef844ef250
SHA512

524d54510f67332fa03759a852b10df648a3d8043cce7a17be1426e87d3d3cfe201a2282b819fbac919f4bb1bb318ae7fbd5456ec77d10cd2a56a427dce14af1
SSDEEP

6144:BS65VWLgVuaozLKuVtsXfB8Mvs3KVXh4LNrxBsVd0H:E6f0Rs58MmKVA/sT0H

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Keygen.exe
unpack001/NFOviewer.exe

Files

Universal PopCap KeyGen v1.2.zip
.zip
Keygen.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.theta
Size: - Virtual size: 192KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.iota
Size: 182KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
NFOviewer.exe
.exe windows:4 windows x86

0b37ecac769869b1ee4d5a40c015b8c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
CreateMutexA
GetLastError
ExitProcess

user32

MessageBoxA

Sections

birthday
Size: 77KB - Virtual size: 15.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
THETA.nfo