KeyGen[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

KeyGen.exe
Size

6.0MB
MD5

8e3b01a2feefd6420973ebb720adf8f2
SHA1

d36152e01dff584140a860f69058ed5719f073ba
SHA256

4c5245532d72bbb5564863ecab153501c65b76a9a369960ce7539b69a7fade7a
SHA512

5966989fccd85b64c0dfa26d5d050cc952d0fd4f4d285942db206a6970cf4cfaefa76394b94f56b512648239d6d6dd3ba0b133bad9230076c7af7370faa1a50b
SSDEEP

98304:PAxD4QiSDggcoEaT1/OAN2wUsvg0fDKNSqsMt/eTvdu8OviKvXtYEYgyyPjQ5m2B:PAP2qxmANvUsY02jsMt/eTvdujiKiEN2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KeyGen.exe

Files

KeyGen.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.9MB - Virtual size: 5.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ