873c5d368f7e3c2e45f33da139db73c3 | Triage

Sharing

General

Target

873c5d368f7e3c2e45f33da139db73c3
Size

19KB
MD5

873c5d368f7e3c2e45f33da139db73c3
SHA1

38cdac55b5bef47e28be4440d5b0d467ce34dcb2
SHA256

e231786d3245f9f7ab880e95f22ef9c82531950ee77e3af88dde0a88b483817a
SHA512

5ebcde3c660b7141256810af4b5f76ac9d6249cea415121ebdb5ebaa592b9736ed4f953a6f3f45b493f6a6bcd4920faf466ca729ca7917ba737850773f2e5d3f
SSDEEP

384:1CT1Qqo9OQOJmJ46zadAKrjmuLLUqCC/k0HE+VGDlyamtLf45sNQf3o8hXF8UoOb:1CT1Qqo9OQOJmJ46zadAKrjmuPUhC/k1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
873c5d368f7e3c2e45f33da139db73c3

Files

873c5d368f7e3c2e45f33da139db73c3
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Administrator\My Documents\Visual Studio 2008\Projects\Windows XP Pro Keygen\Windows XP Pro Keygen\obj\Release\Windows XP Pro Keygen.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 215B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ