Activator[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Activator.exe
Size

74KB
MD5

cc1a8cfaa1687fde310d349cbd6e588a
SHA1

32a03b7293ffa028e87223bf25bf64d3456f3ea2
SHA256

44e3978fdc1f85e2549eca1e34c9e76d36e25357e2a279e671be79e01f5654ec
SHA512

ff754aed38e7a023209da767591072a90a5ebdf2f472657b7dd035aaca24635e222f55079981aa59bc909435341bd89ff32684be305bd5a6090c387c14ed3392
SSDEEP

1536:8DeVxLylIUNxnYfreDs8+hkZZLk4eWZTPfcr:8R6fE+uZZL9RPY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Activator.exe

Files

Activator.exe
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dnguard
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dnguard1
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE