Behavioral task
behavioral1
Sample
keygen.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
keygen.exe
Resource
win10v2004-20231215-en
General
-
Target
7ad849043365fa66de137e1b595e2382
-
Size
46KB
-
MD5
7ad849043365fa66de137e1b595e2382
-
SHA1
1e5252980a92684c117c510c83e5835c3b0c08a6
-
SHA256
3fb653232740a287b0ccb0aee60ac5159ce01d706cfdac06c226bba83b88636f
-
SHA512
89600c3f1fd519d7547ee1ea7513d531ba60733f0a7a5f40ef9dbbe14ae9d9a936a04683169cb5a5f5ca2a15acc6e4166eced82a1eee5e33c095743b2a7c3dd9
-
SSDEEP
768:NZk8cu7sZFNXtFmbhM8JFvbn3rhRKH7JYNtxCbLAaN0jeynj7lo361QP3LbZpG5B:jkugZfrmNMOvb3rhIsgmjHj7lA6QP3L+
Malware Config
Signatures
-
resource yara_rule static1/unpack001/keygen.exe upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/keygen.exe unpack002/out.upx
Files
-
7ad849043365fa66de137e1b595e2382.zip
-
EXPLOSiON.NFO
-
file_id.diz
-
keygen.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
keygen.nfo