Static task
static1
Behavioral task
behavioral1
Sample
keygen.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
keygen.exe
Resource
win10v2004-20231215-en
General
-
Target
2ea161b97ceaf367f96525637eabbee9
-
Size
19KB
-
MD5
2ea161b97ceaf367f96525637eabbee9
-
SHA1
04fdd282d0cdacbd1e4fc73cf43f32ce95578b54
-
SHA256
41d8375c2fe65474a22e3990758af908d7c72f17414d2c52f10129baa19687fd
-
SHA512
aa555e6da93196d0da373c477d08844c75f9350622026872dd9d5e421acd43e3eb76e899a8e0a1292f55f8b9ef151237c3012813b80099f0d0372a4f54b91b86
-
SSDEEP
384:k5lAaE37H3yilpDS1/GL2jYz5aYt/nCKMHlmA5v7:k5lAaEO1+K09t/n2v5T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/keygen.exe
Files
-
2ea161b97ceaf367f96525637eabbee9.rar
-
keygen.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE