Static task
static1
Behavioral task
behavioral1
Sample
Keygen_For_Fake_2021_11_by_ReverseCodez.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
Keygen_For_Fake_2021_11_by_ReverseCodez.exe
Resource
win10v2004-20240611-en
General
-
Target
Keygen_For_Fake_2021_11_by_ReverseCodez.rar
-
Size
106KB
-
MD5
89c1142ca760197306b87a1ea4ff8488
-
SHA1
0ec9213e12975550333729eccc03cbe9ce44ed53
-
SHA256
0dd4434fe34de41c317a14592a1b6a3dcc4eb7450125cfa6f843caddfb2337fa
-
SHA512
2362efba62ad980c7cad63124db776de72f1599c6d0c163d36b85820dd795d489416590965c11f23a890861149725c291758e0d9be80cf71aa48c5a5ce11a4a4
-
SSDEEP
3072:9sqC6TsuOXZXeFO23iaq78IIM2bBjEIRUA:JsukZXeFUF70M2bmIRUA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Keygen_For_Fake_2021_11_by_ReverseCodez.exe
Files
-
Keygen_For_Fake_2021_11_by_ReverseCodez.rar.rar
Password: Anonitak#23
-
Keygen_For_Fake_2021_11_by_ReverseCodez.exe.exe windows:4 windows x86 arch:x86
Password: Anonitak#23
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
e^JyB5 ] Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ