keygen[.]exe | Triage

Resubmissions

02/05/2024, 18:21

240502-wzpbdsdf4y 3

02/05/2024, 18:16

240502-wwmcmade7x 3

Sharing

Copy URL Twitter E-mail

General

Target

keygen.exe
Size

530KB
MD5

04161dd5f2f8a9d46809d493d6f11e83
SHA1

4d96960e6a53c7f4168e8987154827fed0747595
SHA256

993e0cb88d54fea3b30ed781f8831f3252275ac03ab462772fc23bfee9315251
SHA512

a4292d3887cc29090b4bd2e7647cda7234d18984e7ed025b18d51709a1649f794b4fc62f3bea1e0695fac91846aeead2e1c1b4a31602001a13bb716c095ed0dd
SSDEEP

12288:gOVRMspnbsQswUQ8Fwa64+l0W5ArIIod3ADDYYoN3G4QNK/:zMspbsQswZaE0W5ArtodYnoP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
keygen.exe

Files

keygen.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 80KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 304KB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE