Activator[.]exe | Triage

Resubmissions

24-08-2024 21:17

240824-z4835szend 3

24-08-2024 21:11

240824-z1yg8s1gln 3

Sharing

General

Target

Activator.exe
Size

700KB
MD5

849bb77d46ccd2443434405facfbdb04
SHA1

4e291976865785cb5331486a2cd87a7d2403d555
SHA256

4d2e13b3f338c9dd2dd34aff854195f02523f443babc349647873ff40007a754
SHA512

a377c3741ae5671c2d4e5a8d171c028db22f287a1efbf3fca06c09917f97b0eb125365748f9e239eb20ec4b4b0d85f84fd2162c88aeecac37e03151cd13a2b8b
SSDEEP

12288:8q9r8jSXoTGf9de7L/Mg1c4LP3QHWHq0ASQYVAQF8bcpbRB7ZNcJ1NvcPQ4QoSq:8urYSXvK//lcQ42HxASQ2f1RB7Z6J119

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Activator.exe

Files

Activator.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 665KB - Virtual size: 668KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE