Behavioral task
behavioral1
Sample
Nulled AIO 1.0 Cracked For Cracked.io/Nulled AIO 1.0 Cracked For Cracked.io.exe
Resource
win10v2004-20220901-en
General
-
Target
Nulled AIO 1.0 Cracked For Cracked.io.rar
-
Size
1.3MB
-
MD5
b446a65d5a27810bbdfc888c3d3a2a42
-
SHA1
978ad8ba3ad9d99da8b20d1b152e414c11a8590d
-
SHA256
845f11ab094a9fcd383a014229f3346aac01bf3535ffcc2abfc363759323ecef
-
SHA512
3a494f65502b171539f1eff7c8105d7120101e2439362c18fe66a346416f27f140ddca5fd77cb136b7de693ed2599aebb3217b78cf9515f4ed02772f65821a79
-
SSDEEP
24576:PpHF+gty7+cRlTQZa00mXTtu79XLVamUEsR1PpPe51z1c8Lva32emO0+A:PpHsrTQZac29b0lFPpPWzfjy2U0/
Malware Config
Signatures
-
Obfuscated with Agile.Net obfuscator 1 IoCs
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
resource yara_rule static1/unpack001/Nulled AIO 1.0 Cracked For Cracked.io/Nulled AIO 1.0 Cracked For Cracked.io.exe agile_net
Files
-
Nulled AIO 1.0 Cracked For Cracked.io.rar.rar
-
Nulled AIO 1.0 Cracked For Cracked.io/Nulled AIO 1.0 Cracked For Cracked.io.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ