604851cdc9346777f6ef6006d289e77a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

604851cdc9346777f6ef6006d289e77a
Size

427KB
MD5

604851cdc9346777f6ef6006d289e77a
SHA1

d96a8f52c843225229565252da933d98a69a1be0
SHA256

bd1c526cc23cb16a372ee46345e5573973f254dbc6e64b387bbd38b157daeccd
SHA512

aaf145edfbfed7e366c5536565ba361741edc1da773ec60814655205bf16dc0784010127b20669b61c39aaa7e618a35a42e9639f1f9da31980e26391b6a006dc
SSDEEP

6144:w0eVDEV9vY4JPu+l8I51pqXSKKxkc3QjOq//T+rQs8fJ1wyFlbbZkEZUty5FVSMz:Jey9hPuS5L9yb1fzvgq3SMUWG8u4o58/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/garmin unlock generator 1.5/garmin_kgen.exe

Files

604851cdc9346777f6ef6006d289e77a
.rar
garmin unlock generator 1.5/garmin_kgen.exe
.exe windows:4 windows x86 arch:x86

32de7293ba206fcff5baa1ac88a14889

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

RegCloseKey

version

GetFileVersionInfoA

comctl32

ImageList_Add

gdi32

BitBlt

user32

ActivateKeyboardLayout

winmm

timeGetTime

ole32

CoInitialize

oleaut32

GetErrorInfo

Sections

.text
Size: 296KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 246KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
garmin unlock generator 1.5/readme.txt