File Name | Keygen2.exe |
File Type |
PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
|
Scanner Version | 1.0.172.174 |
Database Version | 2024-04-21 12:00:23 UTC |
Malware family: Keygen
Hash Type | Value | Action |
---|---|---|
MD5 |
8b704100bf6ad468fdf883822c35a42b
|
|
SHA1 |
5c88caebf8a1f49e549b31ac914de6900f858f84
|
|
SHA256 |
46c3f11d79a267d74fb91bc0ce3cb5b7f5b7dbf16d905294711253942318e6ef
|
|
SHA512 |
618c091b858f4f5a729c8f1ab46447b6dead2acc4229c97ecb19625df95c79aab3072b09ca3eaff02c16fcf34b5d82c23043a7b235b799d4cbf276c3ada917d7
|
|
ImpHash |
df8deb6ab3e8c648be77dcd9d8f4c614
|
Icon |
Hash: 3b5d50279fa18bb57b3668d43de3510b
Fuzzy: 1e2838571d99451e8ad287bd5c4500b1 dHash: 0071f0ccc0f07000 |
Image Base | 0x00400000 |
Entry Point | 0x004be3c0 |
Compilation Time | 2014-03-27 19:48:53 |
Checksum | 0x00000000 (Actual: 0x00065a34) |
OS Version | 4.0 |
PEiD Signatures |
PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
|
Digital Signature | The PE file does not contain a certificate table. |
Imports |
7 libraries
KERNEL32, advapi32, comctl32, gdi32, oleaut32, user32, version |
Exports | 0 functions |
Resources | 45 Resources |
Sections | 3 Sections |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
UPX0 |
0x00001000 |
458,752 bytes | 0 bytes | 0.00 (Normal) |
IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
UPX1 |
0x00071000 |
319,488 bytes | 316,928 bytes | 7.92 (Packed/Encrypted) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
26CD7550B4FAF6D01A2CE014D2EE0501 |
.rsrc |
0x000bf000 |
69,632 bytes | 66,560 bytes | 4.65 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
4FEC20F2AE2F99B69368934FB91C1399 |
1 section(s) with high entropy (≥7.5) detected - possible packing/encryption
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
RT_CURSOR | 7 | 2,156 bytes | |
RT_ICON | 12 | 61,600 bytes | |
RT_STRING | 13 | 8,520 bytes | |
RT_RCDATA | 3 | 85,881 bytes | |
RT_GROUP_CURSOR | 7 | 140 bytes | |
RT_GROUP_ICON | 1 | 174 bytes | |
RT_MANIFEST | 2 | 1,602 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
The PE file does not contain a certificate table.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft has the capability to identify and eliminate Crack.Win32.Keygen.vb without requiring further user intervention.
Download Anti-MalwareFollow these steps to completely remove the threat from your system