Crackstale[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Crackstale.exe
Size

5.3MB
MD5

b446a1b5466bf06c5c4814e9a5dce1c2
SHA1

06912eb7a07ae6fa7d5f54d1a0912f65815e3422
SHA256

40dd382766e5878bfb099507f48c4be3ad2c152a67e99048abb35e22caaf35df
SHA512

c8bfb74aa982e6bb2480598a710f4e5f8b3910b363572e30c2f9fbe689f2259d7b77b4ecc2af246aa112dca7d4ec96396fa4e27e43395d8a8a5664530a2359ee
SSDEEP

98304:lx+FqkDOSLi68t6aute8X5hnVDMdGDQVju:l8FjcBt6aCDV8y

Score

1^/10

Malware Config

Signatures

Files

Crackstale.exe
.exe windows x86

2ac0cf7550e77ae1af0585bb0dca8719

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetReadFile
InternetWriteFile
HttpOpenRequestA
InternetCloseHandle
InternetCrackUrlA
HttpEndRequestW
HttpQueryInfoA
InternetConnectA
InternetOpenA
InternetCanonicalizeUrlA
HttpSendRequestA
InternetGetConnectedState

d3d11

D3D11CreateDevice

dbghelp

MiniDumpWriteDump
SymFromAddr
SymInitialize

winmm

mciSendStringA
mciGetErrorStringA
joyGetPos
timeGetTime
timeGetDevCaps
timeBeginPeriod
timeEndPeriod
joyGetPosEx

ws2_32

WSAStartup
gethostname
WSAGetLastError
setsockopt
sendto
send
recvfrom
recv
listen
inet_ntoa
inet_addr
getsockopt
ioctlsocket
connect
closesocket
bind
accept
getpeername
select
__WSAFDIsSet
ntohs
ntohl
htons
htonl
WSACleanup
WSAAddressToStringA
getaddrinfo
freeaddrinfo
getsockname
inet_ntop
socket

gdiplus

GdiplusStartup
GdiplusShutdown

comctl32

InitCommonControlsEx

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

rpcrt4

UuidToStringW
UuidCreate

dxgi

CreateDXGIFactory1

mf

MFCreateMediaSession
MFCreateTopology
MFCreateTopologyNode
MFGetService
MFCreateAudioRendererActivate
MFCreateSampleGrabberSinkActivate

mfplat

MFStartup
MFShutdown
MFCreateMediaType
MFCreateSourceResolver

kernel32

GetTimeZoneInformation
SetStdHandle
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
EnumSystemLocalesW
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
SetConsoleCtrlHandler
WriteFile
GetStdHandle
PeekNamedPipe
GetFileType
GetFileInformationByHandle
GetDriveTypeW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindFirstFileExW
ReadFile
MoveFileExW
SetFileAttributesW
GetFileAttributesExW
GetModuleHandleExW
HeapWalk
HeapValidate
LoadLibraryExW
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
VirtualQuery
GetProcessHeap
HeapFree
HeapAlloc
InitializeSListHead
RaiseException
GetStartupInfoW
IsDebuggerPresent
TerminateProcess
UnhandledExceptionFilter
CreateEventW
ResetEvent
SetEvent
SetCurrentDirectoryW
IsValidCodePage
IsProcessorFeaturePresent
GetStringTypeW
GetLocaleInfoEx
GetCPInfo
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
CompareStringEx
LCMapStringEx
FreeLibraryWhenCallbackReturns
GetSystemTimeAsFileTime
GetCurrentProcessorNumber
FlushProcessWriteBuffers
CreateSemaphoreExW
InitOnceExecuteOnce
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SetFileInformationByHandle
FormatMessageA
GetProcAddress
LoadLibraryW
WideCharToMultiByte
GetLastError
LoadLibraryA
MultiByteToWideChar
CloseHandle
WaitForSingleObjectEx
CreateEventExW
OutputDebugStringA
GetConsoleWindow
GetACP
DeleteFileW
GetFullPathNameW
SetLastError
CreateThread
GetExitCodeThread
GetModuleHandleW
LocalFree
FormatMessageW
SetCurrentDirectoryA
GetCurrentDirectoryA
FreeLibrary
GetEnvironmentVariableW
CreateDirectoryW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
RemoveDirectoryW
Sleep
GetExitCodeProcess
CreateProcessW
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
SetWaitableTimer
CreateWaitableTimerW
GetTickCount64
GetFileAttributesA
GetCurrentProcess
GetCurrentThread
SetThreadPriority
SetPriorityClass
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalMemoryStatusEx
GetSystemInfo
GetVersionExW
GetLocaleInfoW
GetUserDefaultLCID
VerSetConditionMask
VerifyVersionInfoW
GetCurrentProcessId
DebugBreak
GetEnvironmentVariableA
ExitProcess
lstrlenA
GetCommandLineW
ExpandEnvironmentStringsW
CreateFileW
GetFinalPathNameByHandleW
SetUnhandledExceptionFilter
SetErrorMode
GetCurrentThreadId
GetModuleFileNameW
MoveFileA
SleepConditionVariableSRW
SleepConditionVariableCS
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
TryEnterCriticalSection
InitializeCriticalSectionEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
RtlCaptureStackBackTrace
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
GetFileInformationByHandleEx
CreateSymbolicLinkW
EncodePointer
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
OutputDebugStringW
SetEndOfFile
HeapReAlloc
HeapSize
GetCurrentDirectoryW
WriteConsoleW
DecodePointer
CreateThreadpoolTimer

user32

GetForegroundWindow
UpdateWindow
SetWindowLongW
EnumDisplaySettingsW
MonitorFromWindow
GetMonitorInfoW
ClientToScreen
SetCursorPos
SetProcessDPIAware
ScreenToClient
SetWindowTextW
ReleaseDC
GetDC
DrawTextW
GetDlgItemTextW
SetDlgItemTextW
GetDlgItem
EndDialog
IsDialogMessageW
PeekMessageW
MoveWindow
DialogBoxParamW
TranslateMessage
LoadImageW
LoadCursorW
CallNextHookEx
SetCursor
AdjustWindowRectEx
GetWindowRect
GetClientRect
SetForegroundWindow
GetSystemMetrics
ReleaseCapture
SetCapture
GetKeyState
SetFocus
BringWindowToTop
SetWindowPos
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassExW
DefWindowProcW
PostMessageW
SendMessageW
MessageBoxW
GetRawInputDeviceList
GetRawInputDeviceInfoA
SetDlgItemTextA
MessageBoxA
GetFocus
IsClipboardFormatAvailable
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
keybd_event
GetAsyncKeyState
wsprintfW
GetCursorPos
DispatchMessageW
GetActiveWindow
CreateDialogParamW
MapWindowPoints

gdi32

SelectObject
GetStockObject
GetDeviceCaps

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW

shell32

ShellExecuteW
SHGetFolderPathW

ole32

CoCreateInstance
CoCreateFreeThreadedMarshaler
CoTaskMemFree
CoInitialize

dwmapi

DwmGetCompositionTimingInfo

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 543KB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

minATL
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mydata
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2ac0cf7550e77ae1af0585bb0dca8719

Headers

DLL Characteristics

File Characteristics

Imports

wininet

d3d11

dbghelp

winmm

ws2_32

gdiplus

comctl32

version

rpcrt4

dxgi

mf

mfplat

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

dwmapi

Sections

.text Size: 3.6MB - Virtual size: 3.6MB

.rdata Size: 1.0MB - Virtual size: 1.0MB

.data Size: 543KB - Virtual size: 2.8MB

minATL Size: 512B - Virtual size: 12B

.mydata Size: 512B - Virtual size: 8B

.rsrc Size: 43KB - Virtual size: 43KB

.text
Size: 3.6MB - Virtual size: 3.6MB

.rdata
Size: 1.0MB - Virtual size: 1.0MB

.data
Size: 543KB - Virtual size: 2.8MB

minATL
Size: 512B - Virtual size: 12B

.mydata
Size: 512B - Virtual size: 8B

.rsrc
Size: 43KB - Virtual size: 43KB