keygen[.]zip | Triage

Sharing

General

Target

keygen.zip
Size

189KB
MD5

5e2d82273d86d9f4a3a7b5ffb168ddd7
SHA1

a6c8019020c705db179fd8e140e21ecd01272ce2
SHA256

c26c8b1d0fe171032f45859d3e07892d8fc73b24fe3356afe635f76e9135c413
SHA512

292981b3bbbdd824c854175795bfbc7d241295a649c87b96675083a3be6797f3c5c8ec957a81d127a62b543c52ec0b7050c6a751eece3db952d76f228ce72b69
SSDEEP

3072:vv/ta2SreZUjViRUIAFFDZF6UL0F5x9x2r2JTBkGK5bipnpSGIX2S:HlT+eOjgAJN0TQ2JF0akYS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/EA Games Generic Multi Keygen 214 - By FFF.exe

Files

keygen.zip
.zip
EA Games Generic Multi Keygen 214 - By FFF.exe
.exe windows:5 windows x86 arch:x86

e03124e900f117238b21ddd52677df36

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

comctl32

InitCommonControlsEx

shlwapi

StrRChrA

version

GetFileVersionInfoSizeW

msimg32

AlphaBlend

user32

DialogBoxParamW

gdi32

GetTextExtentPoint32W

advapi32

RegQueryValueExW

shell32

Shell_NotifyIconW

winmm

waveOutWrite

oleaut32

VariantClear

Sections

.text
Size: 182KB - Virtual size: 628KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE