Static task
static1
General
-
Target
keygen.exe
-
Size
542KB
-
MD5
5c84db2b5c9bfee76db0a22e0aa732c9
-
SHA1
ea81ca2382ba469a8367f09fd86e764baf08f536
-
SHA256
b264d79190cd34f62398b0f221016b15af91ae44b6093ab86d7470c6397d4767
-
SHA512
e6576755e21b2aa4d5bdcdd01df6dbe23ea1639e45e8a6206bf820718bdf57e3f5f26859f991fa4f42807e0d4b2cb0274db0baac84f426ddd857264c6106fae0
-
SSDEEP
12288:bc/kEPDonR6Y436vR8btU+YNT8FyXtfoYjhQgb7S3akSxmvQq:SLonR6Y43ZbCd40XtfoYFQgXGaksmvd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource keygen.exe
Files
-
keygen.exe.exe windows:4 windows x86 arch:x86
61baf0ac33a569be37eaea52c317de1e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
_TrackMouseEvent
ord17
msimg32
GradientFill
kernel32
FreeEnvironmentStringsA
UnhandledExceptionFilter
VirtualQuery
VirtualProtect
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCPInfo
GetOEMCP
GetACP
HeapSize
SetUnhandledExceptionFilter
WriteFile
GetFileType
GetStdHandle
SetHandleCount
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
ReadFile
CloseHandle
LCMapStringW
LCMapStringA
SetFilePointer
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersionExA
GetStartupInfoA
GetModuleHandleA
SetCurrentDirectoryA
SetEnvironmentVariableA
CreateDirectoryA
GetFullPathNameA
GetCurrentDirectoryA
GetDriveTypeA
HeapReAlloc
RtlUnwind
RaiseException
HeapFree
HeapAlloc
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetStdHandle
FlushFileBuffers
CreateFileA
IsBadReadPtr
IsBadCodePtr
QueryPerformanceCounter
GetLocalTime
FindFirstFileA
FindNextFileA
GetLastError
FindClose
DeleteFileA
GetShortPathNameA
GlobalLock
GlobalUnlock
MulDiv
GlobalAlloc
GlobalFree
WideCharToMultiByte
MultiByteToWideChar
WinExec
GetWindowsDirectoryA
GetSystemDirectoryA
GetSystemInfo
GlobalMemoryStatus
GetVersion
GetComputerNameA
FreeLibrary
LoadLibraryA
GetProcAddress
GetCommandLineA
Sleep
GetTickCount
GetModuleFileNameA
GetLocaleInfoW
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedExchange
SetEndOfFile
GetEnvironmentStrings
user32
UnregisterClassA
AdjustWindowRectEx
LoadIconA
LoadCursorA
RegisterClassA
PostQuitMessage
DefWindowProcA
InvalidateRect
BeginPaint
EndPaint
FillRect
TabbedTextOutA
GetSysColor
MoveWindow
ReleaseDC
GetClassLongA
SetClassLongA
SetWindowLongA
IsWindowEnabled
EnableWindow
SetFocus
GetFocus
GetWindowLongA
GetClientRect
InflateRect
DrawFocusRect
DrawTextA
PostMessageA
SetWindowTextA
GetDlgItemTextA
GetDlgCtrlID
IsDlgButtonChecked
CallWindowProcA
FindWindowA
MsgWaitForMultipleObjects
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
MapVirtualKeyA
GetWindowRect
SetActiveWindow
SetWindowPos
GetAsyncKeyState
GetCursorPos
ShowCursor
SetCursorPos
MessageBoxA
EnumDisplaySettingsA
ChangeDisplaySettingsA
CreateWindowExA
ShowWindow
SendMessageA
DestroyWindow
GetDC
GetSystemMetrics
GetActiveWindow
gdi32
CreateDIBSection
CreateCompatibleDC
Rectangle
DeleteDC
SetBkColor
SetStretchBltMode
StretchBlt
Ellipse
MoveToEx
LineTo
SetPixel
GetPixel
GetTextExtentPoint32A
SetDIBColorTable
CreatePalette
CreatePen
GetTextMetricsA
SelectPalette
RealizePalette
BitBlt
SelectObject
SetBkMode
SetTextColor
GetStockObject
CreateFontIndirectA
DeleteObject
CreateSolidBrush
GetDeviceCaps
comdlg32
GetSaveFileNameA
ChooseColorA
GetOpenFileNameA
advapi32
GetUserNameA
shell32
ShellExecuteA
ShellExecuteExA
SHGetSpecialFolderPathA
ole32
CoCreateInstance
IIDFromString
CLSIDFromProgID
CoUninitialize
CreateStreamOnHGlobal
OleUninitialize
CoInitializeEx
OleInitialize
oleaut32
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetVartype
SafeArrayCopy
OleLoadPicture
SafeArrayGetElement
VariantClear
VariantInit
SafeArrayAccessData
SafeArrayGetDim
SafeArrayUnaccessData
SafeArrayCreate
SysFreeString
SysAllocStringByteLen
VariantChangeType
VariantCopyInd
VariantCopy
SysAllocString
SafeArrayPutElement
winmm
sndPlaySoundA
mciSendStringA
timeEndPeriod
timeGetDevCaps
timeBeginPeriod
timeGetTime
Sections
.text Size: 197KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE