windows activator[.]exe | Triage

Sharing

General

Target

windows activator.exe
Size

6.3MB
MD5

17031c953e0b0ca9aa96a37721e090c1
SHA1

ce3de870acf307e7761244fd7ee3523c513e844c
SHA256

42b218f71d22359c1d67630be541516113e82e3c897c3bb9fd41743406583dfc
SHA512

8d203439404fd22defa189d0f6d23ed8009b26b72bfbe8c3eb21b464a2d2cd4380bb69ca4c335fce093d8f65489f74cf46a20efdbd3b3f6b6dcedb42e8b4fea6
SSDEEP

49152:fRaU3QDzbAdXO3z0sqPUJg8E9bM/M6FPoE0oolmCNFhg5wo8T:

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

windows activator.exe

Files

windows activator.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6.3MB - Virtual size: 6.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ