Static task
static1
Behavioral task
behavioral1
Sample
Keygen.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Keygen.exe
Resource
win10v2004-20240426-en
General
-
Target
Keygen.exe
-
Size
118KB
-
MD5
4d6d708b09e391b0406b0698fe45d8f6
-
SHA1
8c5c61c1638df24cc958bbb7e95fb8e233c16a8e
-
SHA256
3e298f1e5bec9960007190badfb1c0295eb9feee23ccbea7a6d28d22d82eb8d4
-
SHA512
79427c45b5bee20cc963c43667d34f96510d9d63827d7e74f8cf6c232cf04c138bdda318d1a33dbb5dbf0e82083b455f111de29a5b128a0477a28501fa5e42bd
-
SSDEEP
1536:IIC4zYsfuBscPb8/dsYsfuBs+41uMVd6YcVVVYzHVVVSDlalnzr7GAb:IPuYIcRidsYIcb41uad6Y9UOr7GE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Keygen.exe
Files
-
Keygen.exe.exe windows:6 windows x86 arch:x86
f7b3126caee425926d37becc91d180d3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
CloseHandle
CreateThread
SetThreadPriority
HeapAlloc
HeapCreate
HeapDestroy
Sleep
CreateFileW
ReadFile
SetFilePointer
FindResourceA
LoadResource
SizeofResource
winmm
waveOutClose
waveOutGetPosition
waveOutOpen
waveOutPrepareHeader
waveOutReset
waveOutUnprepareHeader
waveOutWrite
mscoree
_CorExeMain
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ