Activator[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Activator.exe
Size

49KB
MD5

135911596ae2b8438b3224823127ad3e
SHA1

cdd1674ce32ab677d18c1de05d80496005ebbf51
SHA256

908bfa8abdba0962bbef9ea2c95e75c941908034dd12aa23ea4198c3ac1529f8
SHA512

3c9b278f82e6c412c59596b8e6ccb9cc50bda9799f0c1fd8e637c16a8a20fe4bd0a7c2e066fe0f8c47ef9298c3ac0673291473c43e4aaaffc2ca7733df0cc518
SSDEEP

1536:znyVbWmJCdUkjsuZmqY+1Eb3FJN+xjDjRYgkr9q:znubWgCdUkjTc/uuJNiXxkr9q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Activator.exe

Files

Activator.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\dev-c\OneDrive\Desktop\Driver-boost - Copy - Copy\WindowsFormsApp1\WindowsFormsApp1\obj\Debug\WindowsFormsApp1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ