Static task
static1
Behavioral task
behavioral1
Sample
CA.AllFusion.ERwin.Data.Modeler.v7.2-EDGE/EDGE/keygen.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
CA.AllFusion.ERwin.Data.Modeler.v7.2-EDGE/EDGE/keygen.exe
Resource
win10v2004-20240802-en
General
-
Target
CA.AllFusion.ERwin_keygen.zip
-
Size
38KB
-
MD5
13655aac5e7549b8fef6677faaeedf85
-
SHA1
d8a7998c000a6266e45cae12aa809ab4b2dba02f
-
SHA256
b8e7e3368cb48ece5197c7a7c5247298cc402835e716bc49e92767153fdb9f0e
-
SHA512
f581aa475b21bb12ede901c41e9bade1d6c983f0cb8a2d4fe8021df568f5ed878af8d07efbd8ef6a555ad25b7db419583ff9d3011542edf1889a2ef4a78c3700
-
SSDEEP
768:REj+XfPMu2wmgfubQJrkduthUL+hD6wTuNz0UlTNrgTunHNxHTtHhAenj:Ro/wBGbYrkdurUwDkT1gutjBAE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/CA.AllFusion.ERwin.Data.Modeler.v7.2-EDGE/EDGE/keygen.exe
Files
-
CA.AllFusion.ERwin_keygen.zip.zip
-
CA.AllFusion.ERwin.Data.Modeler.v7.2-EDGE/EDGE/keygen.exe.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
kkrunchy Size: 35KB - Virtual size: 627KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE