Static task
static1
Behavioral task
behavioral1
Sample
prefetch-hash-cracker.exe
Resource
win10v2004-20220812-en
General
-
Target
prefetch-hash-cracker-0.2.0-win-x86_64.zip
-
Size
1.4MB
-
MD5
2e7e06a3c5cdde7bb5dda80c42988da3
-
SHA1
250fd81f4cf94851f86777b95cca8f32366ab372
-
SHA256
c5b4359a7f0b4b996b92a15cd8049642792a16f3efb8ace2a6e817bc71c2498a
-
SHA512
2a6f58e33eed75981aaa441709cdfe860df4e4528aa262a6d941ac147a12e75b43f870ef453d2a7525f72af7d86a251f3d9a6d188e87e3613224538c4501f338
-
SSDEEP
24576:2l1s+eNrS9GgGqASfguTDlJJPnWfpCZtBPSuaRrhykX4X13BG3VK9+vxXfW:2l1sVGGcrlJ9W0BPSuaRr4koX1kE+5e
Malware Config
Signatures
Files
-
prefetch-hash-cracker-0.2.0-win-x86_64.zip.zip
-
prefetch-hash-cracker.exe.exe windows x64
a91d3c4b26271fb4bc943978efceed93
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
opengl32
wglGetCurrentContext
wglGetProcAddress
wglGetCurrentDC
wglMakeCurrent
wglCreateContext
wglShareLists
wglDeleteContext
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
dwmapi
DwmEnableBlurBehindWindow
gdi32
DescribePixelFormat
SetPixelFormat
GetDeviceCaps
SwapBuffers
GetPixelFormat
DeleteObject
CreateRectRgn
ChoosePixelFormat
imm32
ImmGetContext
ImmSetCompositionWindow
ImmReleaseContext
kernel32
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsSetValue
GetConsoleMode
WriteConsoleW
IsDebuggerPresent
RtlVirtualUnwind
IsProcessorFeaturePresent
CloseHandle
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
GetCurrentThreadId
GetModuleHandleW
GetProcAddress
LoadLibraryW
LoadLibraryExW
GetLastError
FreeLibrary
SetThreadErrorMode
GlobalUnlock
GlobalLock
GlobalSize
WideCharToMultiByte
GlobalAlloc
GlobalFree
MultiByteToWideChar
lstrlenW
LoadLibraryA
Sleep
GetModuleHandleA
GetProcessHeap
HeapAlloc
HeapFree
FormatMessageW
LeaveCriticalSection
ReleaseMutex
ReleaseSRWLockShared
AddVectoredExceptionHandler
SetThreadStackGuarantee
SwitchToThread
GetCurrentProcess
GetCurrentThread
RtlCaptureContext
RtlLookupFunctionEntry
SetLastError
GetCurrentDirectoryW
GetEnvironmentVariableW
WriteFile
ReadFile
GetStdHandle
GetCurrentProcessId
QueryPerformanceCounter
TryEnterCriticalSection
QueryPerformanceFrequency
GetSystemTimeAsFileTime
HeapReAlloc
AcquireSRWLockShared
WaitForSingleObjectEx
CreateMutexA
CreateFileW
ExitProcess
GetFullPathNameW
CreateThread
TlsGetValue
InitializeSListHead
ole32
RevokeDragDrop
OleInitialize
CoUninitialize
RegisterDragDrop
CoCreateInstance
CoTaskMemFree
CoInitializeEx
shell32
DragFinish
DragQueryFileW
SHCreateItemFromParsingName
ShellExecuteW
user32
RegisterWindowMessageA
GetDC
CreateIcon
DestroyWindow
PostMessageW
GetClientRect
RegisterClassExW
CreateWindowExW
SetWindowLongPtrW
GetMessageW
TranslateMessage
DispatchMessageW
PostThreadMessageW
GetWindowLongPtrW
RedrawWindow
DefWindowProcW
ChangeDisplaySettingsExW
PeekMessageW
SetWindowPlacement
GetWindowPlacement
SetWindowPos
InvalidateRgn
SystemParametersInfoA
ValidateRect
GetUpdateRect
MapVirtualKeyA
MonitorFromRect
TrackMouseEvent
GetTouchInputInfo
ScreenToClient
CloseTouchInputHandle
GetWindowLongW
ClientToScreen
LoadCursorW
SetCursor
GetCursorPos
MonitorFromWindow
GetMonitorInfoW
GetSystemMetrics
RegisterTouchWindow
GetClassNameW
GetClassInfoExW
ReleaseCapture
OpenClipboard
CloseClipboard
GetClipboardData
EmptyClipboard
SetClipboardData
DestroyIcon
SendMessageW
RegisterRawInputDevices
MsgWaitForMultipleObjectsEx
SetCapture
GetRawInputData
ShowWindow
SetWindowLongW
GetActiveWindow
ShowCursor
GetClipCursor
ClipCursor
IsProcessDPIAware
GetKeyState
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
GetMenu
AdjustWindowRectEx
SetWindowTextW
MapVirtualKeyW
SendInput
SetForegroundWindow
uxtheme
SetWindowTheme
winmm
timeEndPeriod
timeBeginPeriod
timeGetDevCaps
bcrypt
BCryptGenRandom
oleaut32
GetErrorInfo
SysFreeString
SysStringLen
vcruntime140
memmove
memcmp
memcpy
__CxxFrameHandler3
__current_exception_context
__current_exception
_CxxThrowException
memset
__C_specific_handler
api-ms-win-crt-math-l1-1-0
powf
round
truncf
expf
trunc
floorf
roundf
cosf
sinf
floor
ceilf
acosf
cbrtf
_hypotf
__setusermatherr
atan2f
api-ms-win-crt-string-l1-1-0
strlen
api-ms-win-crt-runtime-l1-1-0
_initterm
_initterm_e
_initialize_narrow_environment
_exit
__p___argc
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
_get_initial_narrow_environment
_seh_filter_exe
_set_app_type
_configure_narrow_argv
exit
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
free
_set_new_mode
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ