cr-keygen[.]exe | Triage™

General

Target
cr-keygen.exe
Size 688KB
Sample261024-ltmkhag151
SHA256 05b4dffe16c941e1c64357c9d13673b58f6d1dcc0deeb11759851957d0d08d49
MD5 8344ca17b5f23ef7dbcec522779ec742
SHA1 5270361d34e9034ee779c24d9840352c29e47ab8
SHA512 a0dd0b216e6b3697969e41e2536809c061321104c88b863daf5bec6e9519fde29e5d4c1b2fb87366fe6e82edf772e0c63f5553a01ffc5a4d1d730038fc0259dc
SSDEEP 12288:rWTV2jYhsR3Pv/jGLxe0Ds8LQMNmcpVS39+FREZqdL+f339WXkg6IQn:yDhsR3Pv/0x7DsidUcvSN+/839WEn
TLSH
T16CE422384382E616FBD5EAF2CD1083F4664A9C27EB4611475BCFBD6C7D3AE4A3062205
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cr-keygen.exe

File Explorer

cr-keygen.exe

.exe 688KB

cr-keygen.exe

SHA256 05b4dffe16c941e1c64357c9d13673b58f6d1dcc0deeb11759851957d0d08d49
MD5 8344ca17b5f23ef7dbcec522779ec742
SHA1 5270361d34e9034ee779c24d9840352c29e47ab8
SHA512 a0dd0b216e6b3697969e41e2536809c061321104c88b863daf5bec6e9519fde29e5d4c1b2fb87366fe6e82edf772e0c63f5553a01ffc5a4d1d730038fc0259dc
SSDEEP 12288:rWTV2jYhsR3Pv/jGLxe0Ds8LQMNmcpVS39+FREZqdL+f339WXkg6IQn:yDhsR3Pv/0x7DsidUcvSN+/839WEn
TLSH
T16CE422384382E616FBD5EAF2CD1083F4664A9C27EB4611475BCFBD6C7D3AE4A3062205
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

826171

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

.textbss

Size

Virtual Size

796KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

674KB

Virtual Size

676KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

796B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

24B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

7KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

24B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

cr-keygen.exe

generic