7c1fb7cc9e98947a5dd2701dba4339b4

Sharing

Copy URL Twitter E-mail

General

Target

7c1fb7cc9e98947a5dd2701dba4339b4
Size

262KB
MD5

7c1fb7cc9e98947a5dd2701dba4339b4
SHA1

b7419c39ce4ebfbe2e57a591340542389d13bfbf
SHA256

e5bac5d32f466591110536b7ba37edcd78e569c6253d1e092c39204e8fb19596
SHA512

38b61892b2f26e9abd357a1c1dc0a2e540d63e41d6d7cbf9e98d1cd38a7c7a4f13b9d9b48183543a484ba037bb77d9f6b0a480038b0e7e31a73c52c0267586fd
SSDEEP

6144:K0pDsxo19V6Kpkww05gMY7gMU3mVYsF2f:KXo1eKpJw0YU33m/Qf

Score

3^/10

Malware Config

Signatures

Unsigned PE 5 IoCs

Checks for missing Authenticode signature.

resource
unpack001/crack.vd.serial.Lingvo11/lgv11.exe
unpack001/crack.vd.serial.Lingvo11/vfd/vfd.dll
unpack001/crack.vd.serial.Lingvo11/vfd/vfd.exe
unpack001/crack.vd.serial.Lingvo11/vfd/vfd.sys
unpack001/crack.vd.serial.Lingvo11/vfd/vfdwin.exe

Files

7c1fb7cc9e98947a5dd2701dba4339b4
.rar
crack.vd.serial.Lingvo11/lgv11.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: - Virtual size: 196KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 114KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
crack.vd.serial.Lingvo11/lgv11.img
crack.vd.serial.Lingvo11/serial.txt
crack.vd.serial.Lingvo11/vfd/copying.txt
crack.vd.serial.Lingvo11/vfd/readme.txt
crack.vd.serial.Lingvo11/vfd/readmej.txt
crack.vd.serial.Lingvo11/vfd/vfd.dll
.dll windows:4 windows x86 arch:x86

799ee944a79e71596e11c0e05dca104e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

advapi32

ChangeServiceConfigA
CreateServiceA
OpenSCManagerA
CloseServiceHandle
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueA
QueryServiceConfigA
StartServiceA
OpenServiceA
DeleteService
QueryServiceStatus
ControlService

comctl32

CreatePropertySheetPageA
DestroyPropertySheetPage

comdlg32

GetOpenFileNameA
GetSaveFileNameA

gdi32

SetTextColor
DeleteObject
GetTextExtentPoint32A
SetBkMode
CreateFontIndirectA
SelectObject

ole32

ReleaseStgMedium

shell32

SHGetPathFromIDListA
ShellExecuteA
SHChangeNotify
DragQueryFileA

user32

SetCapture
TrackMouseEvent
RegisterWindowMessageA
BroadcastSystemMessageA
CheckDlgButton
GetParent
PostMessageA
InsertMenuA
CheckMenuItem
ScreenToClient
ChildWindowFromPoint
GetWindowRect
GetDlgCtrlID
CreatePopupMenu
AppendMenuA
TrackPopupMenu
DestroyMenu
SetWindowTextA
SetCursor
DestroyWindow
BeginPaint
GetSysColor
EndPaint
DefWindowProcA
EndDialog
DialogBoxParamA
GetCapture
LoadCursorA
RegisterClassA
SystemParametersInfoA
GetDC
DrawTextA
ReleaseDC
GetCursorPos
GetSystemMetrics
CreateWindowExA
IsDlgButtonChecked
MessageBoxA
GetWindowLongA
SendMessageA
GetDlgItemTextA
SetFocus
SetDlgItemTextA
GetWindowTextA
EnableWindow
SetWindowLongA
CheckRadioButton
SendDlgItemMessageA
GetDlgItem

kernel32

GetVersion
Sleep
LocalAlloc
GetWindowsDirectoryA
FlushFileBuffers
GetCurrentThreadId
GetCommandLineA
HeapAlloc
InterlockedDecrement
SetStdHandle
GetOEMCP
GetACP
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
VirtualAlloc
GetCPInfo
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCurrentProcess
TerminateProcess
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
TlsGetValue
TlsFree
TlsAlloc
TlsSetValue
RtlUnwind
InterlockedIncrement
HeapFree
GetModuleHandleA
ExitProcess
LeaveCriticalSection
EnterCriticalSection
GetLastError
GetFileAttributesA
LocalFree
DeleteCriticalSection
CloseHandle
GetFullPathNameA
GetDriveTypeA
lstrcpynW
lstrcpynA
FormatMessageW
FormatMessageA
GetProcAddress
LoadLibraryA
lstrcmpiW
lstrcmpiA
GetModuleFileNameA
InitializeCriticalSection
GetFileSize
SetLastError
CreateFileA
SetErrorMode
WriteFile
DeviceIoControl
ReadFile
SetFilePointer
QueryDosDeviceA
GetFileInformationByHandle
GetLogicalDrives
DefineDosDeviceA
WideCharToMultiByte
SetEndOfFile
GetTickCount
DisableThreadLibraryCalls

Exports

Exports

DllCanUnloadNow
DllGetClassObject
VfdCheckDriverFile
VfdCheckHandlers
VfdCheckImageFile
VfdChooseLetter
VfdCloseImage
VfdConfigDriver
VfdCreateImageFile
VfdDismountVolume
VfdFormatMedia
VfdGetDeviceName
VfdGetDeviceNumber
VfdGetDriverConfig
VfdGetDriverState
VfdGetDriverVersion
VfdGetGlobalLink
VfdGetImageInfo
VfdGetLocalLink
VfdGetMediaSize
VfdGetMediaState
VfdGetNotifyMessage
VfdGuiClose
VfdGuiFormat
VfdGuiOpen
VfdGuiSave
VfdImageTip
VfdInstallDriver
VfdLookupMedia
VfdMakeFileDesc
VfdMediaTypeName
VfdOpenDevice
VfdOpenImage
VfdRegisterHandlers
VfdRemoveDriver
VfdSaveImage
VfdSetGlobalLink
VfdSetLocalLink
VfdStartDriver
VfdStopDriver
VfdToolTip
VfdUnregisterHandlers
VfdWriteProtect

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
crack.vd.serial.Lingvo11/vfd/vfd.exe
.exe windows:4 windows x86 arch:x86

b7ab6a2ace566f0b9aba2195714a267c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

vfd

VfdWriteProtect
VfdSetGlobalLink
VfdGetDriverState
VfdGetDriverConfig
VfdMakeFileDesc
VfdGetDeviceNumber
VfdGetDriverVersion
VfdCheckDriverFile
VfdFormatMedia
VfdDismountVolume
VfdSaveImage
VfdGetImageInfo
VfdCloseImage
VfdCheckImageFile
VfdCreateImageFile
VfdGetMediaSize
VfdLookupMedia
VfdMediaTypeName
VfdOpenDevice
VfdGetMediaState
VfdOpenImage
VfdGetGlobalLink
VfdGetLocalLink
VfdChooseLetter
VfdSetLocalLink
VfdCheckHandlers
VfdRegisterHandlers
VfdUnregisterHandlers
VfdStopDriver
VfdStartDriver
VfdConfigDriver
VfdRemoveDriver
VfdInstallDriver

msvcrt

strchr
_adjust_fdiv
__p__commode
tolower
sprintf
_controlfp
__set_app_type
toupper
_pctype
_isctype
__mb_cur_max
_stricmp
system
_strnicmp
fgets
fflush
_iob
printf
exit
__p__fmode
_except_handler3
strncpy
strncmp
_exit
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr

kernel32

GetStdHandle
FindFirstFileA
FindClose
GetConsoleScreenBufferInfo
GetConsoleMode
SetConsoleMode
WriteConsoleOutputCharacterA
FillConsoleOutputAttribute
SetConsoleCursorPosition
FillConsoleOutputCharacterA
GetFileAttributesA
GetVersion
FlushConsoleInputBuffer
ReadConsoleInputA
FormatMessageA
LocalFree
CloseHandle
Sleep
SetConsoleCtrlHandler
SetConsoleTitleA
SetCurrentDirectoryA
GetLastError
GetCurrentDirectoryA

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
crack.vd.serial.Lingvo11/vfd/vfd.sys
.sys windows:5 windows x86 arch:x86

68c67eeb0f64fbe83fba0f9a8f3af785

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoGetConfigurationInformation
RtlQueryRegistryValues
ExAllocatePoolWithTag
PsGetVersion
ExFreePool
IofCompleteRequest
PsTerminateSystemThread
KeWaitForSingleObject
ExfInterlockedRemoveHeadList
KeSetPriorityThread
KeGetCurrentThread
IoDeleteDevice
IoDeleteSymbolicLink
ObfDereferenceObject
KeSetEvent
ZwClose
ObReferenceObjectByHandle
PsCreateSystemThread
KeInitializeEvent
KeInitializeSpinLock
IoCreateSymbolicLink
IoRegisterDriverReinitialization
IoCreateDevice
_snwprintf
RtlInitUnicodeString
SeTokenType
ExfInterlockedInsertTailList
PsRevertToSelf
SeImpersonateClient
SeCreateClientSecurity
ZwQueryInformationFile
RtlFreeUnicodeString
ZwCreateFile
RtlAnsiStringToUnicodeString
memmove
ZwReadFile
MmMapLockedPages
MmMapLockedPagesSpecifyCache
RtlCompareMemory
ZwWriteFile
RtlWriteRegistryValue

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 672B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 896B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 320B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
crack.vd.serial.Lingvo11/vfd/vfdhelp.txt
crack.vd.serial.Lingvo11/vfd/vfdhelpj.txt
crack.vd.serial.Lingvo11/vfd/vfdwin.exe
.exe windows:4 windows x86 arch:x86

61a5c7522607e523dacd0910ebd387f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegEnumKeyA
RegQueryInfoKeyA
RegCreateKeyExA
RegEnumValueA
RegQueryValueA

comctl32

ImageList_LoadImageA
ord17

comdlg32

GetOpenFileNameA

ole32

CoCreateInstance
CoUninitialize
CoInitialize

shell32

ShellExecuteA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc
SHChangeNotify

user32

GetMessageA
TranslateAcceleratorA
TranslateMessage
LoadAcceleratorsA
FindWindowA
RegisterClassA
GetClassInfoA
SetForegroundWindow
ChildWindowFromPoint
AppendMenuA
DestroyMenu
ShowWindow
EnableWindow
SetWindowTextA
GetDlgItem
GetClientRect
SendMessageA
GetSystemMetrics
RedrawWindow
SetDlgItemTextA
CreatePopupMenu
TrackPopupMenu
GetDlgCtrlID
ScreenToClient
GetSystemMenu
PostMessageA
LoadImageA
CreateDialogParamA
DeleteMenu
GetWindowRect
PostQuitMessage
SetWindowPos
DestroyWindow
GetWindowLongA
GetParent
CheckDlgButton
SendDlgItemMessageA
SetWindowLongA
MessageBoxA
GetWindowTextA
IsDlgButtonChecked
CheckRadioButton
SetFocus
EndDialog
GetDlgItemTextA
DialogBoxParamA
GetCursorPos
DispatchMessageA
IsDialogMessageA

vfd

VfdCreateImageFile
VfdChooseLetter
VfdOpenImage
VfdUnregisterHandlers
VfdRegisterHandlers
VfdCheckHandlers
VfdToolTip
VfdGetDriverVersion
VfdGetMediaState
VfdGetNotifyMessage
VfdSetGlobalLink
VfdSetLocalLink
VfdGetGlobalLink
VfdGetMediaSize
VfdLookupMedia
VfdMakeFileDesc
VfdMediaTypeName
VfdGuiFormat
VfdGuiSave
VfdGuiOpen
VfdOpenDevice
VfdGuiClose
VfdStopDriver
VfdStartDriver
VfdRemoveDriver
VfdInstallDriver
VfdGetDriverConfig
VfdCheckDriverFile
VfdCheckImageFile
VfdGetLocalLink
VfdGetImageInfo
VfdWriteProtect
VfdConfigDriver
VfdGetDriverState

msvcrt

toupper
strstr
_pctype
sprintf
_isctype
tolower
__p___argv
strchr
_XcptFilter
exit
_exit
__getmainargs
_initterm
_acmdln
_adjust_fdiv
__p__commode
__setusermatherr
__set_app_type
_except_handler3
__p__fmode
_controlfp
_strnicmp
_stricmp
__mb_cur_max

kernel32

CloseHandle
FindFirstFileA
GetModuleHandleA
GetModuleFileNameA
DeleteFileA
MultiByteToWideChar
SetLastError
GetLastError
GetVersion
LocalFree
FormatMessageA
CreateThread
GetFileAttributesA
GetLogicalDrives
GetStartupInfoA
GetExitCodeThread
Sleep
LocalAlloc
FindNextFileA
FindClose

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
crack.vd.serial.Lingvo11/У кого нет флопа.txt
crack.vd.serial.Lingvo11/Читать!!!.txt

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

Size: - Virtual size: 196KB

Size: 114KB - Virtual size: 116KB

.rsrc Size: 30KB - Virtual size: 32KB

799ee944a79e71596e11c0e05dca104e

Headers

File Characteristics

Imports

version

advapi32

comctl32

comdlg32

gdi32

ole32

shell32

user32

kernel32

Exports

Exports

Sections

.text Size: 68KB - Virtual size: 66KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 16KB - Virtual size: 19KB

.rsrc Size: 16KB - Virtual size: 13KB

.reloc Size: 8KB - Virtual size: 6KB

b7ab6a2ace566f0b9aba2195714a267c

Headers

File Characteristics

Imports

vfd

msvcrt

kernel32

Sections

.text Size: 20KB - Virtual size: 16KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 60KB - Virtual size: 59KB

68c67eeb0f64fbe83fba0f9a8f3af785

Headers

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 1KB - Virtual size: 1KB

.rdata Size: 672B - Virtual size: 648B

.data Size: 32B - Virtual size: 12B

PAGE Size: 3KB - Virtual size: 3KB

INIT Size: 1KB - Virtual size: 1KB

.rsrc Size: 896B - Virtual size: 880B

.reloc Size: 320B - Virtual size: 320B

61a5c7522607e523dacd0910ebd387f7

Headers

File Characteristics

Imports

advapi32

comctl32

comdlg32

ole32

shell32

user32

vfd

msvcrt

kernel32

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 28KB - Virtual size: 27KB

.rsrc
Size: 30KB - Virtual size: 32KB

.text
Size: 68KB - Virtual size: 66KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 16KB - Virtual size: 19KB

.rsrc
Size: 16KB - Virtual size: 13KB

.reloc
Size: 8KB - Virtual size: 6KB

.text
Size: 20KB - Virtual size: 16KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 60KB - Virtual size: 59KB

.text
Size: 1KB - Virtual size: 1KB

.rdata
Size: 672B - Virtual size: 648B

.data
Size: 32B - Virtual size: 12B

PAGE
Size: 3KB - Virtual size: 3KB

INIT
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 896B - Virtual size: 880B

.reloc
Size: 320B - Virtual size: 320B

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 28KB - Virtual size: 27KB