Static task
static1
Behavioral task
behavioral1
Sample
WinRAR.v5.01_KEYGEN-FFF.exe
Resource
win7-20240419-en
General
-
Target
WinRAR.v5.01_KEYGEN-FFF.exe
-
Size
215KB
-
MD5
2257d9b1d98795c90aeea996d98a8d9c
-
SHA1
f2f388ab6b485b43bbbb5954f54f6b1585ca4ee8
-
SHA256
144bd20a74a86304809b57a1e28595e0e172308a3d620874cac5e160e7a7b488
-
SHA512
6a9083148fdc0d446f4aef6af3cb69cff7f2d9f198164e8fdb2c210c76f44673cf4eff01b4c10f997d3f03787493738e28231e5171717a56dcc3a4b10ccba1b4
-
SSDEEP
6144:QNcD+22e7tJudIPFsb5zR0130g6hljhjrObGu:CcDL2e79PFY5101MtjqbG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource WinRAR.v5.01_KEYGEN-FFF.exe
Files
-
WinRAR.v5.01_KEYGEN-FFF.exe.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 208KB - Virtual size: 340KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE