keygen[.]exe | Triage

Sharing

General

Target

keygen.exe
Size

324KB
MD5

1537dfb19e396ee3687019d65b59db97
SHA1

d0c35e7c5b3a6d0c9195408e21d28fd33020a0da
SHA256

4a435e0b87e8bd6f3e9f9b306f661ff5428017f33f742fa0788107212757f64c
SHA512

20076cd879e28d911d1288a6f70450eee75bd9446ba9479f5ad18488f05a1e775999de1384fa239ff914f8d810220ffc5e7a15bb9f1a4eb4c8f8c11b85836e9c
SSDEEP

6144:nCWyPqAbxbDv6qjWYN0JdGn/oq/PO3sPQ/aH8ooxZPfv8I8:CQ2DvjjLNkdGn/oWPa1/aHCfb8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
keygen.exe

Files

keygen.exe
.exe windows:4 windows x86 arch:x86

6a4de0c4c1d70a560274afdd077b76ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

msimg32

AlphaBlend

gdi32

UnrealizeObject

version

VerQueryValueA

ole32

CLSIDFromString

comctl32

_TrackMouseEvent

comdlg32

GetSaveFileNameA

Sections

.text
Size: 308KB - Virtual size: 824KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE