117457941bb027353e96a32aa6e5854e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

117457941bb027353e96a32aa6e5854e
Size

34KB
MD5

117457941bb027353e96a32aa6e5854e
SHA1

5226f9463a2942c8f427c9b2883edec7c220a714
SHA256

e45b70f52e84fd6e77ed3a4d64dcb9953ad9298f2bb72c8f43cf3543baf4265c
SHA512

18658fc7042cdb4e4210013920f725858aa5bb5f0c9e73109ef74b47c0a14c41a2a778df9ff96e494d463b084362c5741c8e2880b851a4c5847ee597c03aeacf
SSDEEP

768:AXTG/OhAv0L+f+7V8/uHlPqOzxmRfC/QsidHXc9MZeud/ED:AXqYAv0Lcn/atqWw9Z3cc/ED

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Keygen.exe

Files

117457941bb027353e96a32aa6e5854e
.zip
FXPansion.VST.to.RTAS.Adapter.v2.0.WinXP.Incl.KeyGen-NGEN/Keygen.zip
.zip
Keygen.exe
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.data
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.decode
Size: 32KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ngen.nfo
FXPansion.VST.to.RTAS.Adapter.v2.0.WinXP.Incl.KeyGen-NGEN/file_id.diz
FXPansion.VST.to.RTAS.Adapter.v2.0.WinXP.Incl.KeyGen-NGEN/ngen.nfo