c282c96fb7dfd79842cb6dad0a4280b2 | Triage

Sharing

General

Target

c282c96fb7dfd79842cb6dad0a4280b2
Size

1.9MB
MD5

c282c96fb7dfd79842cb6dad0a4280b2
SHA1

e673c4d251f358988a63c1e00e262f790481ae62
SHA256

4529878f2f581debc853659317ca12b452b81216b00c9da2dfaf47aac586d4b7
SHA512

454f57da7e95ed8ec6c2fd72103d45b98e2d791473d770e4c36ec36209f1f245bd23c95dcfb4108c2ff47baa90db2c6131cb3cd016aa56b87127ded374e8b562
SSDEEP

49152:D8fRBdXR8HBipDUoPujZV2azEFW40lfmnfemwnhnd+cPe:CBwUVoV2E+W40l+nfvad+cPe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Keygen.exe

Files

c282c96fb7dfd79842cb6dad0a4280b2
.rar
Keygen.exe
.exe windows:4 windows x86 arch:x86

f342ff097c4ac4ee5626e9cf1509e94b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

msimg32

AlphaBlend

gdi32

UnrealizeObject

version

VerQueryValueA

comctl32

_TrackMouseEvent

shell32

SHGetPathFromIDListA

ole32

CreateStreamOnHGlobal

olepro32

OleLoadPicture

shlwapi

SHGetValueA

msvcrt

swprintf

setupapi

SetupDiDestroyDeviceInfoList

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 1.9MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Sound Forge 10 bugfix for 32 bit Windows.reg
Sound Forge 10 bugfix for 64 bit Windows.reg
diginsan.nfo
file_id.diz