�qV��������T>y���yq9��.d����rd��^�ϱ2���=Ϫn�4G��W[^S�Œ����$�, �..�/o>SKݑ��d��y������ȕv"�P�7�"���m��{(�!�(�u���',wM�oz���!E�r�iGQ�����Wt(�p>����-+x���,:SB�����_=���c��A���3c|���.z_, W��%�l6�.��|I��iH�'HTN⊸�6��f�ʿ:��M�B��?�ϥ ��f/SC-��j�±Tk۔���V�ɤ�b����$��������o<���2����v�K���t��/�0դ��\~����F���z�aJ�w����t<�t���sB����8���������T�q��A7PF?��`�L{���@�r��@(�pΙ��������xk`��#��Ō�<�ӟ�~��A#�Gڃg�47IА��jb�܈�ZS:❬g�`�]ųU��5�X��C�U� ��𱶪�)��1�qB�d"~���=��[�1�� dV<��'v��Iac����i�k�����Uh=cE�X���Ϻ��6��M���`�g��Sq�����u֩��o���o�}$M�b��l���ٵ��ˏ�X+�v:�iH��#�5(H�?�f� ��x�c�hS�>˲ Py�lU�ѡ�~_yޞ������md<� +��e�sv����|8�y_W&�k-����gѳ��#�� h��qwd��G;5VU�U]�O��ux��| ��������� �$��,���K�w��L���^m���!v.�@��g��~��\qm������P&~�b$��DX.���DX�/L�.��D��c2�]���)�NU���5�:D�tMdʛSQ6B0��)u��Q7;0���*�u陃�[�b������K���ٌ�G��l�T�`P���U��ޱ�H��G�56f�<aE�%�.JG��k�������e�� f��Ծ(��v>�C�^0]� �'�M9���m.��(l�k�I�}42K�N��<���s�/a�,λz�G������Pu(рJ N�<�«�X���(�ޒ�z� }���۴u9R1KfvW:�Of��;얭���:%�S�ˇ�ː@�f�U�m��+�/@�{��Q$�F��U�+v�w��[��H� ����tN�50��� ����;��Z1���{6gbcs)����(e���u������r��´��▎����LJ�8Kβ��W<u�d!74,̛���`0�nv3������W��R������ޱ���; \�.���W/1�u���H%�/�?/�$a�&a�l� 96'�1RX��sڗ6��]���q�A��D%�)#5-Z�`����}�B�q!����ٴ���0[Pz|�[Z"�<:f��F�})�}��ww�V#����e ��@$��T�k���D��h����)�)[c?"aA�sc�v��R�̷2CI�QZc ]�R�ޕ ڢ�r˄O��&ڶ���6�}�saH+��zK]c��΅��R)��^�@E�?����-v0�o %ɒ�ިH��1y�᭻�q(!h�K�(�7��J�}5��d姁�K`�:����/�w3��JL������%^bnk�W%K~1�n'����N(�J���'�����n��z_b��\S�l��'�zh|�LJ;Z�9� HK�zF uP�nbu���ek����%3���|�߿'������� ��d4o�3��n:�MΑ�=�&4g�-*���2 M(�Yr� ��7��,��ksyV0���S�{g,J��r,J5���A�K���n69�q�\*[]6q��$��f�(� k?q>��9�/5' �g�U�j+�~���]c�V��h�d���%�T#7_��I�.Le�k��������]�RQ�8qM� 05��.���QM7w�����:��3�\|EA }��R����M��{<��(�,ˑ��-<<P��@�;��z�HE��er�-G�~�w����~��& .��{�)�"�î3o(�(��Q"��ܭ&;��D���,��<�b��/��k��2�gv�c7���&�cO;K�*�C) Wrd#ڇ3�PW�� w����ݠ#.,���4�)(*� Cy����3�K��II���Z܄�������ߨ��(G�~�1]@ȍ|(�}�� �V�sCDk��N:`H�=�wki/��vL瞕�=9p0�`�.��f� �ǹ®'ۮA����"�q �o�ٕ�Jh�(L �VL�f��I�x��F���h�}3������˦��6�"�f�I���2u_8(rp1ng��S�Zxx�[���[�������.iO��Տ�;���u���=�ˤ���an��� ���o�c��9�_�� �[���5�͖�}֚�1�������v,�NU�v#F���?�t��� =�n��=Q��䨭;� �w��ZA\�:� �?�$18S7�~4 < +� �3�,ގ0�����R��aYy����u�LJ0��� 0T`��AM�|��d� \ !o�H �\@�l����~�������-�^�ޛ��q�vS�4����D�HV�i,�D9,e��g���f9�^���s����Gɨ��pY�������oޣ���e)�4~���y��>�(���e�f/Gx<������[7ɤX�v3�9�z��K�=��&�P���r�� ���S"��"�,�`�R�;^l�� k�����qj<�+�V!U���F{�-�Eg�*�-�=���+����6�u:���}������5CA��<W �.�.h�8��i7�W�E����H:Ehe&|3��Ӱfc`��Q��� y�ަ$��XÉ;~ATC�rS�����.AK�=� R��0!��?�����A)��+�yg��B&�փ��A���DL���OM뚵ڇ�k ���~7z��~\gH�z�b��D�u7��Q[���[ؽ�gtQ���b%k}@����*:��3{x�&�j�"���� |a(����\��C���RJ��yAL���"r����S�(���zl�8[�7��M�tw����VE�j��Vu?S@B�=��L��gPWW�
Static task
static1
Behavioral task
behavioral1
Sample
Setup1Crakedz.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
Setup1Crakedz.exe
Resource
win10v2004-20220414-en
General
-
Target
Setup1Crakedz.exe
-
Size
19.3MB
-
MD5
d527fd56158f5b3bf43f58f0ab6d3cc7
-
SHA1
d742a54b70dc0b95d9e823609d982bbe9d03f548
-
SHA256
b22b77edf760cc0a9b0522be2ba51c9f252106881fc2175213d6290673ca49b6
-
SHA512
d992ccb81231ae7d1ccc415344df1db5cfcf7d8afb5601a6bde5d10615c3715df4ed096def76451589c68a08d463f63b078d4b7ae40e8ed3a609fbe6527de6e8
-
SSDEEP
196608:Jp14XxmVrB/2ZQpLTI7KAN9TmlU9VmAWmhpGgirTGd:Jp14E/9T4OUWAWmhogKGd
Malware Config
Signatures
Files
-
Setup1Crakedz.exe.exe windows x86
2d328c5abe4a256052fb1546154d88bf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpynA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
advapi32
GetUserNameW
user32
CharUpperBuffW
Exports
Exports
Sections
.text Size: - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.)1O Size: - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vwk Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.?<] Size: 7.0MB - Virtual size: 7.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ