CRACK[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CRACK.rar
Size

5.4MB
MD5

3fd34689cc77a3b5155bc363a544511a
SHA1

9e43118b9345bb35ef53190132509b0fe8447eda
SHA256

583ad6333070af8fd29cf15305c50ae8526992a46c964be58ef30aece805b0f8
SHA512

acdbd6e4ef0c429d500ab3f716725a242615be316eb0e4962691e4f6907a275733822521072795c1640102095203b414b5793e7af45534e1ac62b573b5426b29
SSDEEP

98304:RotLDVSBt2W6RvxknogzzBMclXyxySvI69WV06i9FxSF4cYCzOnOX7xHVnoznx+N:+tVaYRJmoW1lCU63603OOYqz+N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/crack.exe

Files

CRACK.rar
.rar
crack.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

xhmN!
Size: 5.4MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ