���.(Q��_�m��G�<�-�TwTQ'���&ºL< ^z�z��ad�{Xڬ���h;��a�Q�K�GC����i������oq�l�=�H��>��^��D:tE"�I�Ê���H�D*6��~�Qs�l<ڌ����P=��q���D���@c�Dl�/�^ϓj.Dg�ϔZ/����լ]�p%�^,�1�0Ԟㄒ ���=�抇�y�����U�p �:;/|�'����� Q�ǡ+�/�����i�����d���A�k���iD�3=x�s�;27B�=4E�x)W���%�@m=2$�>�I��p��#c�J�:[���Z)�y�O���I�I�%���1���D��\�$+�ݗk���#7(]7��C�B�lm,��d��韦����� �]9���G�J�����Bh��E����&M�Q����\6�oH��%�����E��jjV?{� ����{gl:YF�ԁ)>̛��Ys\e�7��%Y�)B,0���e]{o�+<!tX�zL&��ܧ-K�:��_Y�/�^~*}�&��k ��<6�W?$�M������Ǘ���3S��aڝڕJ���b�5�[����1�$k��I��m�ar;ՠ�$��z�C8$$A�����z�m�]���l�6I��c8�~���6��/��A�d����C��xy�Ϲ��/y����2�Xn�����+�^�V��.*��\��.��\u,أ�):�PÉ3{��ݔ�L5�����{��5 h�Gx���~�����6��=�"�3�ij&�� k�ͭ>`��uV�0�d����@�һ��0=�UB}l�|��,VGˉ�ϸd"e0�Ӝ�\(��m,��&��0_FcKu747� �T�R=fA7`����2��;hc d��"d��Ϫ+ܴ�r=E�� �(��.5��b��U0�c����dg�P�M���*��R�+�$ytu��F �ܕ�<1 zA���N5Wxf¨�R�h�cG�U1<����(����A��_/d9|ޟ ��Ò��~6 U�$Q��_f��|HDY����}cH[F���CGKm�_J�#��F�!>�`�1�Bw5�� q\�q{����C�� ��xm��o}q� on�(�O�� +���p�с���}���a���=z�������2Tۆq��LI�nb?[q���w���Je)6�_i{�]E�n�X-SC]m��Y�G��Z*E�G���8gb����8-}��̧��5����^�&�LB���c���~��B�7�<��en��\��d�����v�;>�X�KF��E0DaA�%��,���o��&�¥�� ���ކ����c��'�J�-�&<���S�]�B��s���wk�/C�{/<*4���],��P�ú��5�u��F�o��'&7��o���Qȑ��z`I�m!6�y�+bk��N����Ly�gr��0���A,��}�;ir��2�y^���킚�x/ﺉ�5��*C�U��C�O%7<j!|����\Ug�0ԇni�F{�N�Ĩ��lk�O���X�n,���l���/�"��X��9V��1^���<��*� ��E�!����lH��G0*��!Yj���|����Ϳ���)d�*l�^$m-�2k2��~5�SJ��́\���@�+��sC���9��^�6�~����G�iJ�/��R�����b(Gܾ����έ�2�����Z�BCj�'^� C�d��#�u$͵��ĉ�Yzt��[�3���f���K��2(�iiPr�� {Ntq�8�N2C)�.�7u���Y�tC_Y�������xC�1i,B5��w���!-XMs�!���I���P=J�{~�����?4������-��r��H��8�4π�����T����N�|���wј:A���Ꝍ��3�#cv���5���5kvtn�$\tv�c����jK7�{��>��t�3� ��r��v8�A��y� ��/�̶�W����D���(�#푘s�M�9p��x������u<��.tA�B�1|_�v�"�Tql�<�����:�Ցfv�v�TT+p�� h���mp�0oKI5�����f�y/��p���D|�8J@xKD&pD��?�i`:0<�?���v��~,Ck�����K.�*��-��LS���+շ=p�Ċqy44��&gC*��,��V�ʰ!2�k�+,���=� ���4�h�`��*8���C��jL�_�-��zGJ����I���>��@X���Suת�p0�~y$�)U���NF|� �Vs�T�<g����+R�<r�&un��zM�`���;�Ŝͣ�G��%:/z� �ܭ�ی3���D��rhe+凅���;i�������P2���H1ƲP\�z�8#����s"��ш�� !���:y���zq�`T�X�d��DDr��6��z�7A�j�x �(F�tsVJS6�~bz<��������s��]�f�p'��Po��-5�p>�� �b��e���W�IT1o��\��}��s� ة�6h~Ya�-,p��e{�Y.8�(�jI���R�>�!5R������5f m�W�� :�'bN۸�>?���9B�N�}uU���̡��u�N;���hx��#�&�y�HSmXT�=/�����8��4�:�b>���I?���R��:���;�:J� l����X�� /XJ%���^@\��Mb����;������I؎w��C�@��ګW?@ب���Z����A�������������j�p �0v铵ᘙ� �_� �p���n��#��u&�IΖ��yhP����(\Dun=H��q�_UZ����"��͂4~ʹ�z�R���J�9|2�(�{>ϧ�������?�L��Cl;W�?�I��D�%ك�|��-+ޔ {8��C�* �jnG��#T�0c�)����_;v�5�� p'`�����ߴ�u1���6�����P��bզ���*2��]�g�hW�z)�_���h+'�d�U���̙��Rڻ<J>�-d>2��-����2I���4�2B&��gy���K@����u�$�w�W`�k���ӍM=HP�
Static task
static1
Behavioral task
behavioral1
Sample
cracked_rust.exe
Resource
win10v2004-20220901-en
General
-
Target
cracked_rust.exe
-
Size
20.0MB
-
MD5
7e27601c22884383a8ba775cbe790402
-
SHA1
a4061f2af8483433355564926336f2b29d1c38fa
-
SHA256
5ce4dc612cd36df8bae4965d45bb37d45aa2178b6f00904831e63b7054979cf9
-
SHA512
503ab76e825b3ed04638befbb3524c051589a40285fb25d13e19782795750b743be55dee4b4b6d4a8cbf220578a64948307a26d1a42b854223e3e9440516456a
-
SSDEEP
393216:r3wYdqyj5gYWoViiniCPHUuWuKt0i00SlsQV32gcmIKxyBlQ0SQ99OPlKjl1:bwtyHWIiwiCvUuux0zlPpPcxJ19MPoD
Malware Config
Signatures
Files
-
cracked_rust.exe.exe windows x64
1d6c8d80751cf3b3c4a748f9b6f8a001
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetModuleHandleA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
PostQuitMessage
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
advapi32
CheckTokenMembership
msvcp140
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
imm32
ImmSetCompositionWindow
ntdll
NtRaiseHardError
urlmon
URLDownloadToFileA
d3d9
Direct3DCreate9
psapi
GetModuleInformation
userenv
UnloadUserProfile
vcruntime140_1
__CxxFrameHandler4
vcruntime140
_CxxThrowException
api-ms-win-crt-stdio-l1-1-0
fflush
api-ms-win-crt-runtime-l1-1-0
exit
api-ms-win-crt-math-l1-1-0
sqrt
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-heap-l1-1-0
malloc
api-ms-win-crt-string-l1-1-0
isalnum
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-convert-l1-1-0
strtoll
api-ms-win-crt-filesystem-l1-1-0
_access
api-ms-win-crt-locale-l1-1-0
localeconv
ws2_32
WSAIoctl
wldap32
ord301
crypt32
CertFreeCertificateContext
normaliz
IdnToAscii
shell32
ShellExecuteA
wtsapi32
WTSSendMessageW
Exports
Exports
Sections
.text Size: - Virtual size: 669KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
UEBANSIG Size: - Virtual size: 17.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UEBANSIG Size: 20.0MB - Virtual size: 20.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 220B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 469B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ