keygen[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

keygen.exe
Size

301KB
MD5

9d1148ceb3e112865af47710d838130c
SHA1

cbbf1f5eec1e396b775b47c96a258de57acb8d43
SHA256

7bd4ac5a187c330b2fc8d4f2d710899624e174c3ecb28bd9406ff61dfd0606d6
SHA512

0ce9911b2d4f5df8412c39b8d9fca8c86e11e1956f15b4b571c770de2a7f4494b0d4d8d0ce85e474dff99382bc3b2f5fe2dd5eed4205bd774c73573a2b4e31f3
SSDEEP

6144:Ry5STq0gTBBK7uUEnrgQfM8QWh6FlTuzWgOCJn3JOmSkn/aIHoShM:Qo2uuUEnrFM8cFlq7OCV3JTycoShM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
keygen.exe

Files

keygen.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

text
Size: - Virtual size: 476KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

data
Size: 292KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE