Keygen[.]exe | Triage

Sharing

General

Target

Keygen.exe
Size

609KB
MD5

19f85a45de2dcfa8a2dbb016c3421582
SHA1

8ad9f66e29cb988e98132f64b6d045bde4bee501
SHA256

68f78c6fa80a3643dc8389008bb8e3632ef1ddd9927ec079a09a5a9a773d26aa
SHA512

c2a5eba709968daa842f9f42ba419e0e5e27ead6df1f008ecc6a679f3ad18dce7d0ec025d8f46a19611133ae7388388916c627ef581873ec6965f915981d0289
SSDEEP

12288:RT/3xaMs0/jfPxGpCZcgdD4qd0oiYlkZxmfCh:RTUUTxGgL54qyovODU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Keygen.exe

Files

Keygen.exe
.exe windows:4 windows x86 arch:x86

32a31fbc8bf28db3ee1293055ab37840

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

IsWindowEnabled

advapi32

RegOpenKeyExA

comctl32

ImageList_Create

Sections

.pdata
Size: - Virtual size: 1.1MB

IMAGE_SCN_MEM_READ

.pdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.CRT
Size: 102KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE