fdab2233f05dbed72b5a8644344b706969a7e628d000811bf75e82ec2caf1fc3

Sharing

Copy URL Twitter E-mail

General

Target

fdab2233f05dbed72b5a8644344b706969a7e628d000811bf75e82ec2caf1fc3
Size

11.2MB
MD5

b37867c6c641546ebbef34ae69309375
SHA1

5007af1c2d923473a512f057270f5d561dce2f88
SHA256

fdab2233f05dbed72b5a8644344b706969a7e628d000811bf75e82ec2caf1fc3
SHA512

c8ed524b9c556a054cec0f52c6468fd541bb5a901e45818018921544ff5e48cb402d3376c1a052bd2e325dcaca1508172a150a150bf6fc54f87f444d1c337265
SSDEEP

196608:T9tmo/tp65IrfeC7QFai2SqP5eH0fBN0WiQD6hX/q+f:Ztmolpd7cai27ripS+f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdab2233f05dbed72b5a8644344b706969a7e628d000811bf75e82ec2caf1fc3

Files

fdab2233f05dbed72b5a8644344b706969a7e628d000811bf75e82ec2caf1fc3
.exe windows:6 windows x64 arch:x64

6199806a2fda8b57b3eb39508f7c66b9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\Work\C4DKey-Keygen3.2x-New230120\Keygen\x64\Release\3ShapePatch.pdb

Imports

shlwapi

SHGetValueA
SHSetValueA

imagehlp

MakeSureDirectoryPathExists

ole32

CoCreateInstance
CoInitialize
CoUninitialize

shell32

SHGetSpecialFolderPathA
Shell_NotifyIconA

user32

wsprintfA
LoadIconA
FindWindowA

kernel32

GetModuleHandleW
WriteConsoleW
SetEndOfFile
HeapSize
CreateFileW
GetProcessHeap
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetModuleFileNameA
SizeofResource
GetOEMCP
SetConsoleTitleA
WriteFile
SetFilePointer
FindResourceA
GetModuleHandleA
SetCurrentDirectoryA
MultiByteToWideChar
Sleep
CopyFileA
CreateFileA
LockResource
GetConsoleTitleA
CloseHandle
LoadResource
GetCurrentProcessId
GetTickCount
VirtualQuery
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
WideCharToMultiByte
LCMapStringEx
GetStringTypeW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RtlUnwindEx
RtlPcToFileHeader
RaiseException
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetStdHandle
GetModuleFileNameW
GetCommandLineA
GetCommandLineW
HeapFree
HeapAlloc
GetFileType
WaitForSingleObject
GetExitCodeProcess
CreateProcessW
GetFileAttributesExW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
HeapReAlloc

Sections

.text
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11.0MB - Virtual size: 11.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6199806a2fda8b57b3eb39508f7c66b9

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

shlwapi

imagehlp

ole32

shell32

user32

kernel32

Sections

.text Size: 169KB - Virtual size: 168KB

.rdata Size: 79KB - Virtual size: 78KB

.data Size: 4KB - Virtual size: 11KB

.pdata Size: 9KB - Virtual size: 8KB

_RDATA Size: 512B - Virtual size: 244B

.rsrc Size: 11.0MB - Virtual size: 11.0MB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 169KB - Virtual size: 168KB

.rdata
Size: 79KB - Virtual size: 78KB

.data
Size: 4KB - Virtual size: 11KB

.pdata
Size: 9KB - Virtual size: 8KB

_RDATA
Size: 512B - Virtual size: 244B

.rsrc
Size: 11.0MB - Virtual size: 11.0MB

.reloc
Size: 2KB - Virtual size: 2KB