C:\Users\Администратор\documents\visual studio 2012\Projects\ConsoleApplication1\Release\ConsoleApplication1.pdb
Static task
static1
Behavioral task
behavioral1
Sample
KeyGen crackzerro.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
KeyGen crackzerro.exe
Resource
win10v2004-20240226-en
General
-
Target
KeyGen crackzerro.exe
-
Size
2.5MB
-
MD5
62b039b2af7bf5f6abf35ef903024300
-
SHA1
4ae220e451482e839619c2e927752468e0eda8d5
-
SHA256
83d7f6eaf7fe075503ea6a0bc726633c34595a6eae7edd7deab95ab4d4a66fd5
-
SHA512
8abcf2fb422465fa578eb59e2788317ef88360551b675c964e03475a865e22dd4b86550bb442c1823fa72de059cedb438cac34538dcb291ccdb22fd34ee5433e
-
SSDEEP
49152:45U/Jdf39XFINkWr5kkYe6TdOYz44rcaMJIsjOO/ry3X0EdNZgJAxGEG8CZaFD:L79XaH5kheKdX4cjuR6q6XTNTI58Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource KeyGen crackzerro.exe
Files
-
KeyGen crackzerro.exe.exe windows:6 windows x86 arch:x86
bc218d171102d713e75b8c44a7aedb14
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetCurrentProcess
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
CharUpperBuffW
Exports
Exports
����NǕÄ��^��vƜX�v5"z�������<�(Z�����"0��w��V�ȠCǯ:Y؇h3u�!���}|x�� ��Ԫ��B�U��~�~6��"z�u���W_���<�ȧjy�l��!� ���EK�-��?��� ��t���ﺷ�;�K�>����~ ����i�<��roT#��?����Y�lA��R2�v��IG���x^Dq�����*��jɦR�"G�a�x��g)�/�"!�u�������} J��3H}�x�����|��A�D�F��1K梸���M8�f�����[i3�7��(ҹz�TK~����1~���w���P�;U���,>�M�巬�k6Hyb|i����4-���/�48h�#�ܼO �1��q-��fN�w�B�![~�t��7G�*v��1��~��{^k'���"s���BBEL�%��]��=�:TpLvQ�~U�_�O~R��ͭ¸���Z��;�g������np~g���ʒ�� �;j�;�#eB��w׳E�q�1�4Ua�9�<�/G�hr�V��Kl���R�J�_� �Lo��L��:�A'#xo�k�ZSb�P��Z];�c���o������3ӷNY"�qK�J��E�g���\OS��C��.?��Ômpr��l��#�p�`3��Pv�XT��'(��q��?����-r�^��K����&��a3*/����?�o(�{�E�[�.��=f��>���)�V���Ա]lm�TwƌC>�|�U���^�;ݕ�[�e�x�#�I7���x �WK�&;Lv�kH+7W�����k�������c�FV��y��D�X��_�,X 6���T��x�� ���S�\ڝK�Z�8�����0�Z�K p�zf �����-�Z���aP�'e����zRB|�7<خ�C��ǁC��=�#Q�-��+���#T6 � M��#�}.�y0"�P}�K�g7�����Y����#y����x-J�j ���:*풢?��4?�Ũ�6��>�5�,<v�ل���Y{�,7�zn�0�l7��l���~1k�Da���x�80v]�z�k�5��G�4�^5�*8ZFC*�4�cA�eԾ��#���bO�i�l�%Ha"���>B��I+-�~rUA�]'��ڥ*U� 47P�Mt�E��k�$�j����+�C�yٌ�� ��CC�@p��9�~�8��B&�&��,�^�T�c =#ł@� �K͉zٞ�ÌB����p��qt��R��3�pb��g͓��٣I~��,'V->K4S��c���a͗�����Wrbƾ�% ���m�aS� ��傊:�����D��]b�f�ŵ��2��>$b"��Ae)�{��G�?�*�h���f�����j#�c�/�?�H��l��E��4��+Ϧ ���Gm'_�'Ƿ���"�vZŕ��MQ5�{������"y����:3���f; �,re���wѼ�ԓ��x��C�4�\�k�up�R�� =���ȴ;Z��w���8�X�0�5�nP^�5@?^0��9m��I�� #q�F,�& ��[i�����.�?P���$P���V��Be�&�{^� �q��!�& �18=�����4[�~�3}��Ry�����HDw��*ɾ�w�\;\��~���k��4������zۦ`=�H�a���V��c���f� ��m$W�y76�r��b�.%����×I��X��[�c��'�m��ƽ{�C��H�����'��M+��װ���"�}$c�Q�ؘK��9�q�"��O٫~F3ړ5M앍�D~QW2��+�X�ǗyU�L��q��"9W��Z�66�45�#K�S������|{�&���K�:h.��Fn[�30�w6!�I��č�U���$���2둤��A^F&���^h8��BvlNQD�M4:�ǝ8�l9�k,����R!�S��OP �X�bl¶,�w�$��)�V�֤du������S������tM�L��'.�������]<+�j�(y~��N�ַ��EFFi ~c7�6;��{�k��FP��숫����� 4�5G��V��� Hh�q��У�2�m����v��wG�����+3� &���~�í��R�Au��� �er�R�,s�͝Q���i��� �^]Z�-���4-7"�R{3�頽� c6�?o⮞s����F�jdh�� ���+a��0[����u\y ���1O�#)�mF�45@��=��K��@�i+�q1� [^9@�h��i�*�¦��?�}�Q���F�I00�e��(�>�/P�C��;�.��I����lb&X0���f '4@.`�g�n���������9tD#ڬ���q��h�y4q����43.����<��n��y��ҋ�PTz!��M�j�$R7��m�U/�| FX����$>��3��褟�z���_hBo�9�!#hB�P�ģ�09b�����ʏo?����f����(6<�'�t�?q4��~�ӱ�M ��qÅA�gtl�5�1�����atʭ��Zߔ{�ƨ��"���"?��J<�����V8 ��q��&������-�Wʻ6��<�U�D՛���~���ѧ�,�J�ml�^��� �YzPc�J=�̳�!e�� d��o_pa����o�� �3@�L����3(��p�׃�OH��H����(W�wѺ��>���qk <�b(a����q��f�����,U�+~�Y���;)"�7�ގ�a���M �c��ŹƩ���H�'�K�Ô�]�zO�I�]��V��`+<?I�- Y��NVd3�9���7���R�k������hy�<StRb��W�uM����W����W�`4�X�\����1L/#y�&�"달Oh��}�8��ԞTG:%j��ĩ�@dOeH��04��PV9C��]k%-��Q��*&: L�\�z�{�U�ɑ�Z����`B�-�ܝwu�i�/țd+�,3�D�}�Uk���Q��&>��,-1Ŗ����2X�!��_�$zD\ެ�xr����Q�wL:,�b��'�-+?���39����*�Z.XQ '׳�x���~�U�Գ�6x%��;�"�_�h�w���5�r�l�Es�.�W�4��
Sections
.text Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xpdata Size: - Virtual size: 17.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PC-RET Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xpdata Size: - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xpdata Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 469B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE