Static task
static1
Behavioral task
behavioral1
Sample
Crack_v1.0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Crack_v1.0.exe
Resource
win10v2004-20231215-en
General
-
Target
Crack_v1.0.exe
-
Size
457KB
-
MD5
cf9b612077224208723a2f22659a1044
-
SHA1
75ca3904075231d0d2351c54004a7a57dc9d9b38
-
SHA256
60b4c1150509c41a436b2824b8908fd6f14380563c178c75da4bb7a603947393
-
SHA512
df417aa94a525de00dbfff613cc6a908afde7ce84c86480df0e20625e921c5f3610c1695926bb274d6872d2c11a7d7608dfc416f89063f723c13094b75c3d20d
-
SSDEEP
6144:gnL8mpWDGkDmpMAVee+FmiQUHwxVWAwOpYuAweu9/H1UWTnIdk3EWg:UL8qkwMleWm7UJ8Yzweu9VTnIDW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Crack_v1.0.exe
Files
-
Crack_v1.0.exe.exe windows:6 windows x64 arch:x64
b69a89f21c7a9a8bbc53cbddca5d2582
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
QueryPerformanceFrequency
GetProcAddress
VerSetConditionMask
FreeLibrary
VerifyVersionInfoW
QueryPerformanceCounter
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
WideCharToMultiByte
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GlobalUnlock
GlobalLock
GlobalFree
MultiByteToWideChar
GlobalAlloc
CreateThread
CreateEventW
Sleep
CloseHandle
user32
SetWindowTextW
ScreenToClient
EnumDisplayMonitors
MonitorFromWindow
SetWindowPos
GetDC
SetCapture
LoadCursorA
WindowFromPoint
AdjustWindowRectEx
GetWindowLongW
UpdateWindow
PostQuitMessage
PeekMessageA
ShowWindow
SetCursor
SetWindowLongW
GetClientRect
UnregisterClassA
GetCapture
SetWindowLongA
ClientToScreen
IsChild
GetMonitorInfoA
DefWindowProcA
CreateWindowExA
SetLayeredWindowAttributes
SetFocus
GetKeyState
BringWindowToTop
DestroyWindow
FindWindowA
RegisterClassExA
ReleaseCapture
SetForegroundWindow
TranslateMessage
UnhookWindowsHookEx
IsIconic
SetCursorPos
ReleaseDC
GetForegroundWindow
SetWindowsHookExA
GetCursorInfo
GetAsyncKeyState
CallNextHookEx
PostMessageA
DispatchMessageA
GetMessageA
GetDesktopWindow
GetWindowRect
SetClipboardData
GetCursorPos
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
gdi32
GetDeviceCaps
msvcp140
?_Xout_of_range@std@@YAXPEBD@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
d3d9
Direct3DCreate9
imm32
ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow
vcruntime140_1
__CxxFrameHandler4
vcruntime140
_CxxThrowException
memset
__C_specific_handler
__current_exception_context
__current_exception
strstr
__std_terminate
__std_exception_copy
__std_exception_destroy
memchr
memcmp
memcpy
memmove
api-ms-win-crt-heap-l1-1-0
_set_new_mode
malloc
free
_callnewh
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-convert-l1-1-0
strtof
api-ms-win-crt-stdio-l1-1-0
fflush
ftell
fclose
__stdio_common_vsprintf
fseek
__stdio_common_vsprintf_s
fwrite
_wfopen
fread
__acrt_iob_func
__p__commode
__stdio_common_vsscanf
_set_fmode
api-ms-win-crt-runtime-l1-1-0
_register_thread_local_exe_atexit_callback
_exit
exit
_wassert
_initterm_e
_c_exit
_get_narrow_winmain_command_line
_set_app_type
terminate
_seh_filter_exe
_cexit
_initterm
_configure_narrow_argv
_initialize_narrow_environment
_crt_atexit
_register_onexit_function
_errno
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table
api-ms-win-crt-string-l1-1-0
strncpy
strncmp
strcmp
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-math-l1-1-0
sinf
__setusermatherr
fmodf
sqrtf
cosf
ceilf
acosf
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 346KB - Virtual size: 346KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ