Keygen[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Keygen.exe
Size

8KB
MD5

68c19dd9baf2c30c0e27c9490d2d8c31
SHA1

b9d0d9af7806157bd00cd8400a7cb5a20a32ed8e
SHA256

ecd5e4f2243d3a83453649b5fe9a93890ce0d5fd621b590459907be96cb24200
SHA512

e81bc06e2df0615e59918821891381375fb3f1dc7e6b6f88e1ee3417125c7afdb466dbfb8f8d79f875feb813e41e3bcd5f366b7deb034e7da69820d66a5b7f71
SSDEEP

96:Hw05Cu2LpM4fdpZF4446zcL1kmy2YIjXsc1oR8sHIFTF9gMkR+DdiUVzNt:ApMed/F54oiY48c1oR8sHIFTF9gJV0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Keygen.exe

Files

Keygen.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Hadi\Desktop\GMW.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ