General

  • Target

    Nursultan_crack.zip

  • Size

    71.1MB

  • MD5

    40c6eb37b86f137dbee873989f0b0b9a

  • SHA1

    45a5e3067c4f832324c2bd4b1be21e847eb2ff68

  • SHA256

    3a142c04b1ca2cac6e006be56e09177d269e7283ae6a41fb6a5d57a322a33c83

  • SHA512

    6d40175d1de173e9e0ec0dbfc89e8b1e7d8b520603c828f024358dec5830cc3227b57f41cc8926e8321b3878eff36b83000e76ac09ce3eec40dc54b676c19175

  • SSDEEP

    1572864:wZ4479Sflpd5yMDriM1WB8yHlRbczCOCp+M7Ih3mA9zzE:F7NpXr908K+cIhWSM

Score
3/10

Malware Config

Signatures

  • Unsigned PE 35 IoCs

    Checks for missing Authenticode signature.

Files

  • Nursultan_crack.zip
    .zip
  • Nursultan_crack/Crack.exe
    .exe windows x64

    24fd8ebdcbd74dc199c9db922415e62f


    Code Sign

    Headers

    Imports

    Sections

  • Nursultan_crack/dll/dll32.dll
  • Nursultan_crack/dll/dll64.dll
  • Nursultan_crack/java/bin/WinFallbackLookup.dll
    .dll windows x64

    5c1e284f9d97e37bb95e0682cf6bcf89


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/awt.dll
    .dll windows x64

    a4c7c99790c971ac737c3f08f296a042


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/dt_socket.dll
    .dll windows x64

    604405232ebe2d96f9494ccc34ca7fa7


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/fontmanager.dll
    .dll windows x64

    91fd73b9a4037322d2f6a6adcadd73d0


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/freetype.dll
    .dll windows x64

    ce8c7e2c5334ce5b9384f5a83936587a


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/instrument.dll
    .dll windows x64

    83b9d82143d59500f2f3ae8c752a2445


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/j2gss.dll
    .dll windows x64

    299d741c7745772702f72c87295de7c5


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/j2pcsc.dll
    .dll windows x64

    a2a000f6b3d0d85b15f0258ca1c55a16


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/j2pkcs11.dll
    .dll windows x64

    871c18a3f18ecab51d5ecd68aca00dfb


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/jaas.dll
    .dll windows x64

    a9dba4eb07347f10096b128bcd2c1821


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/java.dll
    .dll windows x64

    b33b4d5ad893429faa944633ddbf1444


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/javaaccessbridge.dll
    .dll windows x64

    a3d866249503fa8472f482bcb23bdfad


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/javajpeg.dll
    .dll windows x64

    7b04ff8a35b4b98575fece9d9f1d9882


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/jawt.dll
    .dll windows x64

    eccfb1d2122d975614164da8796b5b01


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/jdwp.dll
    .dll windows x64

    54ee8f4373ffea6823584c7c462be6df


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/jimage.dll
    .dll windows x64

    d242721be6aebd558282959c387ff391


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/jli.dll
    .dll windows x64

    ca6d94f4909999e6bf412e32444e9825


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/jsound.dll
    .dll windows x64

    79eee71e972a20c3204415093de4dc75


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/jsvml.dll
    .dll windows x64

    3ca6b39e7e05f1883ec4635bc9c1b9bb


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/lcms.dll
    .dll windows x64

    d01bce2465f97a3fda47b37c3615644a


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/management.dll
    .dll windows x64

    2d28aaf6ef90c3a8ad51a72b3bb02fad


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/management_agent.dll
    .dll windows x64

    5d39be65150cd283d64483bd71da8573


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/management_ext.dll
    .dll windows x64

    2d5cf671c9a3b3ea0e032fee859f36e8


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/mlib_image.dll
    .dll windows x64

    43a4a3daac2f94db57c70fb5a19e0dee


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/net.dll
    .dll windows x64

    d88e8fee378ea46346f39f72689262f9


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/nio.dll
    .dll windows x64

    d9ccc5591b87f571837b3bfffa162cc7


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/prefs.dll
    .dll windows x64

    09fa6d6125ad32b439fe12eda5253cda


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/rmi.dll
    .dll windows x64

    2870c94f68f5d5879dde240d95d940b7


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/server/jvm.dll
    .dll windows x64

    ec2f43caa091ae3e0bbfcf562ec5f10b


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/splashscreen.dll
    .dll windows x64

    2ea57fbbbc6a81c379bfce4b354e6503


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/sspi_bridge.dll
    .dll windows x64

    101ff3a3cc819bb12a581f27759c0130


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/sunmscapi.dll
    .dll windows x64

    474114bb706087856e6cfc0781b7ab0f


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/w2k_lsa_auth.dll
    .dll windows x64

    12b4487af4a02271ce911548f148d40b


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/windowsaccessbridge-64.dll
    .dll windows x64

    d522c8af55f6e3b162ffbcca2b26a0f9


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/bin/zip.dll
    .dll windows x64

    d11d294e50fc8d2035ed6d22a3916cbb


    Headers

    Imports

    Exports

    Sections

  • Nursultan_crack/java/conf/logging.properties
  • Nursultan_crack/java/conf/management/jmxremote.access
  • Nursultan_crack/java/conf/management/jmxremote.password.template
  • Nursultan_crack/java/conf/management/management.properties
  • Nursultan_crack/java/conf/net.properties
  • Nursultan_crack/java/conf/security/java.policy
  • Nursultan_crack/java/conf/security/java.security
  • Nursultan_crack/java/conf/security/policy/README.txt
  • Nursultan_crack/java/conf/security/policy/limited/default_US_export.policy
  • Nursultan_crack/java/conf/security/policy/limited/default_local.policy
  • Nursultan_crack/java/conf/security/policy/limited/exempt_local.policy
  • Nursultan_crack/java/conf/security/policy/unlimited/default_US_export.policy
  • Nursultan_crack/java/conf/security/policy/unlimited/default_local.policy
  • Nursultan_crack/java/conf/sound.properties
  • Nursultan_crack/java/lib/classlist
  • Nursultan_crack/java/lib/fontconfig.bfc
  • Nursultan_crack/java/lib/fontconfig.properties.src
  • Nursultan_crack/java/lib/jfr/default.jfc
    .xml
  • Nursultan_crack/java/lib/jfr/profile.jfc
    .xml
  • Nursultan_crack/java/lib/jrt-fs.jar
    .jar
  • Nursultan_crack/java/lib/jvm.cfg
  • Nursultan_crack/java/lib/modules
  • Nursultan_crack/java/lib/psfont.properties.ja
  • Nursultan_crack/java/lib/psfontj2d.properties
  • Nursultan_crack/java/lib/security/blocked.certs
  • Nursultan_crack/java/lib/security/cacerts
  • Nursultan_crack/java/lib/security/default.policy
  • Nursultan_crack/java/lib/security/public_suffix_list.dat
    .zip
  • Nursultan_crack/java/lib/tzdb.dat
  • Nursultan_crack/java/lib/tzmappings
  • Nursultan_crack/minecraft.jar
    .zip
  • Nursultan_crack/start.bat
  • __MACOSX/._Nursultan_crack
  • __MACOSX/Nursultan_crack/._Crack.exe
  • __MACOSX/Nursultan_crack/._dll
  • __MACOSX/Nursultan_crack/._java
  • __MACOSX/Nursultan_crack/._minecraft.jar
  • __MACOSX/Nursultan_crack/._start.bat
  • __MACOSX/Nursultan_crack/dll/._dll32.dll
  • __MACOSX/Nursultan_crack/dll/._dll64.dll
  • __MACOSX/Nursultan_crack/java/._bin
  • __MACOSX/Nursultan_crack/java/._conf
  • __MACOSX/Nursultan_crack/java/._lib
  • __MACOSX/Nursultan_crack/java/bin/._WinFallbackLookup.dll
  • __MACOSX/Nursultan_crack/java/bin/._awt.dll
  • __MACOSX/Nursultan_crack/java/bin/._dt_socket.dll
  • __MACOSX/Nursultan_crack/java/bin/._fontmanager.dll
  • __MACOSX/Nursultan_crack/java/bin/._freetype.dll
  • __MACOSX/Nursultan_crack/java/bin/._instrument.dll
  • __MACOSX/Nursultan_crack/java/bin/._j2gss.dll
  • __MACOSX/Nursultan_crack/java/bin/._j2pcsc.dll
  • __MACOSX/Nursultan_crack/java/bin/._j2pkcs11.dll
  • __MACOSX/Nursultan_crack/java/bin/._jaas.dll
  • __MACOSX/Nursultan_crack/java/bin/._java.dll
  • __MACOSX/Nursultan_crack/java/bin/._javaaccessbridge.dll
  • __MACOSX/Nursultan_crack/java/bin/._javajpeg.dll
  • __MACOSX/Nursultan_crack/java/bin/._jawt.dll
  • __MACOSX/Nursultan_crack/java/bin/._jdwp.dll
  • __MACOSX/Nursultan_crack/java/bin/._jimage.dll
  • __MACOSX/Nursultan_crack/java/bin/._jli.dll
  • __MACOSX/Nursultan_crack/java/bin/._jsound.dll
  • __MACOSX/Nursultan_crack/java/bin/._jsvml.dll
  • __MACOSX/Nursultan_crack/java/bin/._lcms.dll
  • __MACOSX/Nursultan_crack/java/bin/._management.dll
  • __MACOSX/Nursultan_crack/java/bin/._management_agent.dll
  • __MACOSX/Nursultan_crack/java/bin/._management_ext.dll
  • __MACOSX/Nursultan_crack/java/bin/._mlib_image.dll
  • __MACOSX/Nursultan_crack/java/bin/._net.dll
  • __MACOSX/Nursultan_crack/java/bin/._nio.dll
  • __MACOSX/Nursultan_crack/java/bin/._prefs.dll
  • __MACOSX/Nursultan_crack/java/bin/._rmi.dll
  • __MACOSX/Nursultan_crack/java/bin/._server
  • __MACOSX/Nursultan_crack/java/bin/._splashscreen.dll
  • __MACOSX/Nursultan_crack/java/bin/._sspi_bridge.dll
  • __MACOSX/Nursultan_crack/java/bin/._sunmscapi.dll
  • __MACOSX/Nursultan_crack/java/bin/._w2k_lsa_auth.dll
  • __MACOSX/Nursultan_crack/java/bin/._windowsaccessbridge-64.dll
  • __MACOSX/Nursultan_crack/java/bin/._zip.dll
  • __MACOSX/Nursultan_crack/java/bin/server/._jvm.dll
  • __MACOSX/Nursultan_crack/java/conf/._logging.properties
  • __MACOSX/Nursultan_crack/java/conf/._management
  • __MACOSX/Nursultan_crack/java/conf/._net.properties
  • __MACOSX/Nursultan_crack/java/conf/._security
  • __MACOSX/Nursultan_crack/java/conf/._sound.properties
  • __MACOSX/Nursultan_crack/java/conf/management/._jmxremote.access
  • __MACOSX/Nursultan_crack/java/conf/management/._jmxremote.password.template
  • __MACOSX/Nursultan_crack/java/conf/management/._management.properties
  • __MACOSX/Nursultan_crack/java/conf/security/._java.policy
  • __MACOSX/Nursultan_crack/java/conf/security/._java.security
  • __MACOSX/Nursultan_crack/java/conf/security/._policy
  • __MACOSX/Nursultan_crack/java/conf/security/policy/._README.txt
  • __MACOSX/Nursultan_crack/java/conf/security/policy/._limited
  • __MACOSX/Nursultan_crack/java/conf/security/policy/._unlimited
  • __MACOSX/Nursultan_crack/java/conf/security/policy/limited/._default_US_export.policy
  • __MACOSX/Nursultan_crack/java/conf/security/policy/limited/._default_local.policy
  • __MACOSX/Nursultan_crack/java/conf/security/policy/limited/._exempt_local.policy
  • __MACOSX/Nursultan_crack/java/conf/security/policy/unlimited/._default_US_export.policy
  • __MACOSX/Nursultan_crack/java/conf/security/policy/unlimited/._default_local.policy
  • __MACOSX/Nursultan_crack/java/lib/._classlist
  • __MACOSX/Nursultan_crack/java/lib/._fontconfig.bfc
  • __MACOSX/Nursultan_crack/java/lib/._fontconfig.properties.src
  • __MACOSX/Nursultan_crack/java/lib/._jfr
  • __MACOSX/Nursultan_crack/java/lib/._jrt-fs.jar
  • __MACOSX/Nursultan_crack/java/lib/._jvm.cfg
  • __MACOSX/Nursultan_crack/java/lib/._modules
  • __MACOSX/Nursultan_crack/java/lib/._psfont.properties.ja
  • __MACOSX/Nursultan_crack/java/lib/._psfontj2d.properties
  • __MACOSX/Nursultan_crack/java/lib/._security
  • __MACOSX/Nursultan_crack/java/lib/._tzdb.dat
  • __MACOSX/Nursultan_crack/java/lib/._tzmappings
  • __MACOSX/Nursultan_crack/java/lib/jfr/._default.jfc
  • __MACOSX/Nursultan_crack/java/lib/jfr/._profile.jfc
  • __MACOSX/Nursultan_crack/java/lib/security/._blocked.certs
  • __MACOSX/Nursultan_crack/java/lib/security/._cacerts
  • __MACOSX/Nursultan_crack/java/lib/security/._default.policy
  • __MACOSX/Nursultan_crack/java/lib/security/._public_suffix_list.dat