General

  • Target

    FabFilter_KeyGen.exe

  • Size

    595KB

  • MD5

    a33436a23f01c4741101d8f3eb1a794a

  • SHA1

    c26e493e16c6a7f87d756c66c20edaa4131a756d

  • SHA256

    4eb798f61d00aecfe7db1e21647e7730f540e7342d7188aa4ba0b89aacbb3316

  • SHA512

    ffd52dd048d9763ca5afa976edf04b718f4eac1e849080fa2f9b509bcf8fccd85ebd65309edc7bfae71550a82777c51f65408b5420e5a2fb651f05d9b64a2e1f

  • SSDEEP

    12288:XYkc9t2Sll/gSFBaBQoi0gdfuqPZuWXTIRvV2PM+CkxaIy:XYkcL5uKvjhuWXTIRN2bdQR

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • FabFilter_KeyGen.exe
    .exe windows:4 windows x86 arch:x86

    61259b55b8912888e90f516ca08dc514


    Headers

    Imports

    Sections

  • $TEMP/BASSMOD.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $TEMP/R2RFBFKG.dll
    .dll windows:6 windows x86 arch:x86

    8d962137300d8f37f900c2608d7a9e77


    Headers

    Imports

    Exports

    Sections

  • $TEMP/bgm.it
  • $TEMP/keygen.exe
    .exe windows:4 windows x86 arch:x86

    61baf0ac33a569be37eaea52c317de1e


    Headers

    Imports

    Sections