Behavioral task
behavioral1
Sample
equity_cracker-main/Windows/dist/Equity.exe
Resource
win10v2004-20230703-en
General
-
Target
equity_cracker-main.rar
-
Size
64.1MB
-
MD5
7a6eeb490e9497af5ee5b4e7c92afe8c
-
SHA1
58f66aa42057c5a497dbea64e674ee35a0b7a37e
-
SHA256
21add57b17f5ae71103b7a714ed42c11119191bee398ac5191bb0988fe317aee
-
SHA512
6d98b23666c230c78c47360782e360d8bfef493861489e509dad6bfe0f7b8117a32f5db48bf92a56886ea38490dc2a0862cf0b89ed3d49ca50319d8ea04e5b60
-
SSDEEP
1572864:MnC7ZjdhG/hcIHg/21+J3lL4ZLxSKWdmfLzqwsCd93A8VcX:uClhhGyMo28VGGg93A8s
Malware Config
Signatures
-
Detects Pyinstaller 1 IoCs
resource yara_rule static1/unpack001/equity_cracker-main/Windows/dist/Equity.exe pyinstaller -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/equity_cracker-main/Windows/dist/Equity.exe
Files
-
equity_cracker-main.rar.rar
-
equity_cracker-main/DATA
-
equity_cracker-main/LICENSE
-
equity_cracker-main/Windows/DATA
-
equity_cracker-main/Windows/Equity.spec
-
equity_cracker-main/Windows/ICON.ico
-
equity_cracker-main/Windows/build/Equity/Analysis-00.toc
-
equity_cracker-main/Windows/build/Equity/EXE-00.toc
-
equity_cracker-main/Windows/build/Equity/Equity.exe.manifest.xml
-
equity_cracker-main/Windows/build/Equity/Equity.pkg
-
equity_cracker-main/Windows/build/Equity/PKG-00.toc
-
equity_cracker-main/Windows/build/Equity/PYZ-00.pyz
-
equity_cracker-main/Windows/build/Equity/PYZ-00.toc
-
equity_cracker-main/Windows/build/Equity/Tree-00.toc
-
equity_cracker-main/Windows/build/Equity/Tree-01.toc
-
equity_cracker-main/Windows/build/Equity/Tree-02.toc
-
equity_cracker-main/Windows/build/Equity/base_library.zip.zip
-
_bootlocale.pyc
-
_collections_abc.pyc
-
_weakrefset.pyc
-
abc.pyc
-
codecs.pyc
-
collections/__init__.pyc
-
collections/abc.pyc
-
copyreg.pyc
-
encodings/__init__.pyc
-
encodings/aliases.pyc
-
encodings/ascii.pyc
-
encodings/base64_codec.pyc
-
encodings/big5.pyc
-
encodings/big5hkscs.pyc
-
encodings/bz2_codec.pyc
-
encodings/charmap.pyc
-
encodings/cp037.pyc
-
encodings/cp1006.pyc
-
encodings/cp1026.pyc
-
encodings/cp1125.pyc
-
encodings/cp1140.pyc
-
encodings/cp1250.pyc
-
encodings/cp1251.pyc
-
encodings/cp1252.pyc
-
encodings/cp1253.pyc
-
encodings/cp1254.pyc
-
encodings/cp1255.pyc
-
encodings/cp1256.pyc
-
encodings/cp1257.pyc
-
encodings/cp1258.pyc
-
encodings/cp273.pyc
-
encodings/cp424.pyc
-
encodings/cp437.pyc
-
encodings/cp500.pyc
-
encodings/cp720.pyc
-
encodings/cp737.pyc
-
encodings/cp775.pyc
-
encodings/cp850.pyc
-
encodings/cp852.pyc
-
encodings/cp855.pyc
-
encodings/cp856.pyc
-
encodings/cp857.pyc
-
encodings/cp858.pyc
-
encodings/cp860.pyc
-
encodings/cp861.pyc
-
encodings/cp862.pyc
-
encodings/cp863.pyc
-
encodings/cp864.pyc
-
encodings/cp865.pyc
-
encodings/cp866.pyc
-
encodings/cp869.pyc
-
encodings/cp874.pyc
-
encodings/cp875.pyc
-
encodings/cp932.pyc
-
encodings/cp949.pyc
-
encodings/cp950.pyc
-
encodings/euc_jis_2004.pyc
-
encodings/euc_jisx0213.pyc
-
encodings/euc_jp.pyc
-
encodings/euc_kr.pyc
-
encodings/gb18030.pyc
-
encodings/gb2312.pyc
-
encodings/gbk.pyc
-
encodings/hex_codec.pyc
-
encodings/hp_roman8.pyc
-
encodings/hz.pyc
-
encodings/idna.pyc
-
encodings/iso2022_jp.pyc
-
encodings/iso2022_jp_1.pyc
-
encodings/iso2022_jp_2.pyc
-
encodings/iso2022_jp_2004.pyc
-
encodings/iso2022_jp_3.pyc
-
encodings/iso2022_jp_ext.pyc
-
encodings/iso2022_kr.pyc
-
encodings/iso8859_1.pyc
-
encodings/iso8859_10.pyc
-
encodings/iso8859_11.pyc
-
encodings/iso8859_13.pyc
-
encodings/iso8859_14.pyc
-
encodings/iso8859_15.pyc
-
encodings/iso8859_16.pyc
-
encodings/iso8859_2.pyc
-
encodings/iso8859_3.pyc
-
encodings/iso8859_4.pyc
-
encodings/iso8859_5.pyc
-
encodings/iso8859_6.pyc
-
encodings/iso8859_7.pyc
-
encodings/iso8859_8.pyc
-
encodings/iso8859_9.pyc
-
encodings/johab.pyc
-
encodings/koi8_r.pyc
-
encodings/koi8_t.pyc
-
encodings/koi8_u.pyc
-
encodings/kz1048.pyc
-
encodings/latin_1.pyc
-
encodings/mac_arabic.pyc
-
encodings/mac_croatian.pyc
-
encodings/mac_cyrillic.pyc
-
encodings/mac_farsi.pyc
-
encodings/mac_greek.pyc
-
encodings/mac_iceland.pyc
-
encodings/mac_latin2.pyc
-
encodings/mac_roman.pyc
-
encodings/mac_romanian.pyc
-
encodings/mac_turkish.pyc
-
encodings/mbcs.pyc
-
encodings/oem.pyc
-
encodings/palmos.pyc
-
encodings/ptcp154.pyc
-
encodings/punycode.pyc
-
encodings/quopri_codec.pyc
-
encodings/raw_unicode_escape.pyc
-
encodings/rot_13.pyc
-
encodings/shift_jis.pyc
-
encodings/shift_jis_2004.pyc
-
encodings/shift_jisx0213.pyc
-
encodings/tis_620.pyc
-
encodings/undefined.pyc
-
encodings/unicode_escape.pyc
-
encodings/utf_16.pyc
-
encodings/utf_16_be.pyc
-
encodings/utf_16_le.pyc
-
encodings/utf_32.pyc
-
encodings/utf_32_be.pyc
-
encodings/utf_32_le.pyc
-
encodings/utf_7.pyc
-
encodings/utf_8.pyc
-
encodings/utf_8_sig.pyc
-
encodings/uu_codec.pyc
-
encodings/zlib_codec.pyc
-
enum.pyc
-
functools.pyc
-
heapq.pyc
-
io.pyc
-
keyword.pyc
-
linecache.pyc
-
locale.pyc
-
operator.pyc
-
re.pyc
-
reprlib.pyc
-
sre_compile.pyc
-
sre_constants.pyc
-
sre_parse.pyc
-
tokenize.pyc
-
traceback.pyc
-
types.pyc
-
warnings.pyc
-
weakref.pyc
-
equity_cracker-main/Windows/build/Equity/localpycos/struct.pyo
-
equity_cracker-main/Windows/build/Equity/warn-Equity.txt
-
equity_cracker-main/Windows/build/Equity/xref-Equity.html.html
-
equity_cracker-main/Windows/build/index/Analysis-00.toc
-
equity_cracker-main/Windows/build/index/EXE-00.toc
-
equity_cracker-main/Windows/build/index/PKG-00.toc
-
equity_cracker-main/Windows/build/index/PYZ-00.pyz
-
equity_cracker-main/Windows/build/index/PYZ-00.toc
-
equity_cracker-main/Windows/build/index/Tree-00.toc
-
equity_cracker-main/Windows/build/index/Tree-01.toc
-
equity_cracker-main/Windows/build/index/Tree-02.toc
-
equity_cracker-main/Windows/build/index/base_library.zip.zip
-
_bootlocale.pyc
-
_collections_abc.pyc
-
_weakrefset.pyc
-
abc.pyc
-
codecs.pyc
-
collections/__init__.pyc
-
collections/abc.pyc
-
copyreg.pyc
-
encodings/__init__.pyc
-
encodings/aliases.pyc
-
encodings/ascii.pyc
-
encodings/base64_codec.pyc
-
encodings/big5.pyc
-
encodings/big5hkscs.pyc
-
encodings/bz2_codec.pyc
-
encodings/charmap.pyc
-
encodings/cp037.pyc
-
encodings/cp1006.pyc
-
encodings/cp1026.pyc
-
encodings/cp1125.pyc
-
encodings/cp1140.pyc
-
encodings/cp1250.pyc
-
encodings/cp1251.pyc
-
encodings/cp1252.pyc
-
encodings/cp1253.pyc
-
encodings/cp1254.pyc
-
encodings/cp1255.pyc
-
encodings/cp1256.pyc
-
encodings/cp1257.pyc
-
encodings/cp1258.pyc
-
encodings/cp273.pyc
-
encodings/cp424.pyc
-
encodings/cp437.pyc
-
encodings/cp500.pyc
-
encodings/cp720.pyc
-
encodings/cp737.pyc
-
encodings/cp775.pyc
-
encodings/cp850.pyc
-
encodings/cp852.pyc
-
encodings/cp855.pyc
-
encodings/cp856.pyc
-
encodings/cp857.pyc
-
encodings/cp858.pyc
-
encodings/cp860.pyc
-
encodings/cp861.pyc
-
encodings/cp862.pyc
-
encodings/cp863.pyc
-
encodings/cp864.pyc
-
encodings/cp865.pyc
-
encodings/cp866.pyc
-
encodings/cp869.pyc
-
encodings/cp874.pyc
-
encodings/cp875.pyc
-
encodings/cp932.pyc
-
encodings/cp949.pyc
-
encodings/cp950.pyc
-
encodings/euc_jis_2004.pyc
-
encodings/euc_jisx0213.pyc
-
encodings/euc_jp.pyc
-
encodings/euc_kr.pyc
-
encodings/gb18030.pyc
-
encodings/gb2312.pyc
-
encodings/gbk.pyc
-
encodings/hex_codec.pyc
-
encodings/hp_roman8.pyc
-
encodings/hz.pyc
-
encodings/idna.pyc
-
encodings/iso2022_jp.pyc
-
encodings/iso2022_jp_1.pyc
-
encodings/iso2022_jp_2.pyc
-
encodings/iso2022_jp_2004.pyc
-
encodings/iso2022_jp_3.pyc
-
encodings/iso2022_jp_ext.pyc
-
encodings/iso2022_kr.pyc
-
encodings/iso8859_1.pyc
-
encodings/iso8859_10.pyc
-
encodings/iso8859_11.pyc
-
encodings/iso8859_13.pyc
-
encodings/iso8859_14.pyc
-
encodings/iso8859_15.pyc
-
encodings/iso8859_16.pyc
-
encodings/iso8859_2.pyc
-
encodings/iso8859_3.pyc
-
encodings/iso8859_4.pyc
-
encodings/iso8859_5.pyc
-
encodings/iso8859_6.pyc
-
encodings/iso8859_7.pyc
-
encodings/iso8859_8.pyc
-
encodings/iso8859_9.pyc
-
encodings/johab.pyc
-
encodings/koi8_r.pyc
-
encodings/koi8_t.pyc
-
encodings/koi8_u.pyc
-
encodings/kz1048.pyc
-
encodings/latin_1.pyc
-
encodings/mac_arabic.pyc
-
encodings/mac_croatian.pyc
-
encodings/mac_cyrillic.pyc
-
encodings/mac_farsi.pyc
-
encodings/mac_greek.pyc
-
encodings/mac_iceland.pyc
-
encodings/mac_latin2.pyc
-
encodings/mac_roman.pyc
-
encodings/mac_romanian.pyc
-
encodings/mac_turkish.pyc
-
encodings/mbcs.pyc
-
encodings/oem.pyc
-
encodings/palmos.pyc
-
encodings/ptcp154.pyc
-
encodings/punycode.pyc
-
encodings/quopri_codec.pyc
-
encodings/raw_unicode_escape.pyc
-
encodings/rot_13.pyc
-
encodings/shift_jis.pyc
-
encodings/shift_jis_2004.pyc
-
encodings/shift_jisx0213.pyc
-
encodings/tis_620.pyc
-
encodings/undefined.pyc
-
encodings/unicode_escape.pyc
-
encodings/utf_16.pyc
-
encodings/utf_16_be.pyc
-
encodings/utf_16_le.pyc
-
encodings/utf_32.pyc
-
encodings/utf_32_be.pyc
-
encodings/utf_32_le.pyc
-
encodings/utf_7.pyc
-
encodings/utf_8.pyc
-
encodings/utf_8_sig.pyc
-
encodings/uu_codec.pyc
-
encodings/zlib_codec.pyc
-
enum.pyc
-
functools.pyc
-
heapq.pyc
-
io.pyc
-
keyword.pyc
-
linecache.pyc
-
locale.pyc
-
operator.pyc
-
re.pyc
-
reprlib.pyc
-
sre_compile.pyc
-
sre_constants.pyc
-
sre_parse.pyc
-
tokenize.pyc
-
traceback.pyc
-
types.pyc
-
warnings.pyc
-
weakref.pyc
-
equity_cracker-main/Windows/build/index/index.exe.manifest.xml
-
equity_cracker-main/Windows/build/index/index.pkg
-
equity_cracker-main/Windows/build/index/localpycos/struct.pyo
-
equity_cracker-main/Windows/build/index/warn-index.txt
-
equity_cracker-main/Windows/build/index/xref-index.html.html
-
equity_cracker-main/Windows/config.yaml
-
equity_cracker-main/Windows/dist/DATA
-
equity_cracker-main/Windows/dist/Equity.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 19.0MB - Virtual size: 19.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
index.pyc
-
equity_cracker-main/Windows/dist/config.yaml
-
equity_cracker-main/Windows/dist/debug.txt
-
equity_cracker-main/Windows/index.py
-
equity_cracker-main/Windows/index.spec
-
equity_cracker-main/config.yaml
-
equity_cracker-main/index.py
-
equity_cracker-main/start-debug.bat