Windows-Activator-Free[.]exe

General

Target

Windows-Activator-Free.exe
Size

128KB
MD5

216a75c672a41343c0df6415f2c21830
SHA1

57f48648cc0a20c285542e387309c2b780ff5f9b
SHA256

e1a7e9598ce015e143eb6ef70792a8ea4bf3edc4e77c637a0a133fcaa4228909
SHA512

7af87e38867c09abb43865c190ecee22b39c01c4a10e00b73251133e876dcd35a5416d07202ecce34740d111f05f6e93f51382f659fb3056fe6eeb56173ab4af
SSDEEP

1536:mNHSbY1W+ohAXCT6B8wJfq5uHYi4ht0TQNKM9JqT6B8wJf:OSbL+ohrTHwUuHYiQhNKMLqTHw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Windows-Activator-Free.exe

Files

Windows-Activator-Free.exe
.exe windows:6 windows x86 arch:x86

eb5d6db985e5c05e168a42448e68a564

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Projects\Visual Studio\Output\Windows-Activator\bin\Release\Windows-Activator.pdb

Imports

kernel32

IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
GetCurrentProcess
TerminateProcess
Sleep
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
CloseHandle
WaitForSingleObject
CreateProcessW

api-ms-win-crt-runtime-l1-1-0

_cexit
_initialize_onexit_table
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
terminate
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
exit
abort

vcruntime140

_except_handler4_common
__FrameUnwindFilter
memset
__current_exception
__current_exception_context

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb5d6db985e5c05e168a42448e68a564

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

api-ms-win-crt-runtime-l1-1-0

vcruntime140

mscoree

Sections

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 82KB - Virtual size: 82KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 30KB - Virtual size: 30KB

.reloc Size: 1024B - Virtual size: 648B

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 82KB - Virtual size: 82KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 30KB - Virtual size: 30KB

.reloc
Size: 1024B - Virtual size: 648B