685108fbbe59be9af9146c4fa4ef5c2649165dd7da48ef9149fbe863b54f77ba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

685108fbbe59be9af9146c4fa4ef5c2649165dd7da48ef9149fbe863b54f77ba
Size

13KB
MD5

b461d4997bc73cde2c302615ca74a1ed
SHA1

abb24497cbc3d7864e384b79705c26ffadd8755f
SHA256

685108fbbe59be9af9146c4fa4ef5c2649165dd7da48ef9149fbe863b54f77ba
SHA512

aa7ade840e819b19da1a07c000a2191f53323eb37cbe62063073dac3aa6a87ffeecc7fe6828df54b3999bd06803a0c457fa00af13db4aa8417366c91c2060d6f
SSDEEP

384:k4PcXq9St2ifzIGzANml/GFXhjfTCHkfv/:k4MPfzIhN0eFXhjff

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/keygen/kg.exe

Files

685108fbbe59be9af9146c4fa4ef5c2649165dd7da48ef9149fbe863b54f77ba
.zip
keygen/install.txt
keygen/kg.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\xb0z\Documents\Visual Studio 2013\Projects\NEWiSOFM\NEWiSOFM\obj\Release\TEAMCRD.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ