Static task
static1
Behavioral task
behavioral1
Sample
Keygen.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
Keygen.exe
Resource
win10v2004-20240226-en
General
-
Target
Keygen.exe
-
Size
1.6MB
-
MD5
08cfaf120cd12bafe53c2fbb50c204b1
-
SHA1
5279ce82ca511711fdc45e85421ec392ea86c5f8
-
SHA256
807d1394a104671b9826aef653b595f7f2c29269faf12228c981f2005094379f
-
SHA512
ae1b2af4fdb4c9e105ca5b9417a0107cff4228534d722b64d41ae39ec40e568f1fca99872d015d57eeb6fffaad3b56083b266780735f11e05ac97ed028a8f417
-
SSDEEP
24576:T3LSgb4mRT8WwY7/lyAsC4TY/UWR4sI3Q9Tz:TuA4s8WwKtpJbqA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Keygen.exe
Files
-
Keygen.exe.exe windows:5 windows x86 arch:x86
7613a1b63eba8a86c259c1a5f2a22098
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
RegisterWindowMessageW
advapi32
RegSaveKeyW
comctl32
ImageList_Replace
Sections
.pdata Size: - Virtual size: 3.7MB
IMAGE_SCN_MEM_READ
.ctors Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 601KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE