141c284cfc630e5698da5faa93e6a580 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

141c284cfc630e5698da5faa93e6a580
Size

56KB
MD5

141c284cfc630e5698da5faa93e6a580
SHA1

70fa36a7aa7cc176fd66875a13c746c4975be939
SHA256

52cabc7c0a6cb677a11c9495707b244eece4018747d11d0e980cd44602fb7cef
SHA512

d6bd714e0152c9dbeb03e1fa7f1539c244bf0b56724df115bc4964031a3563ecddc6ffe9fa7f97afe3ddf169c8e180301c2cdc82c3aad42cda9f66bd9ed5a48d
SSDEEP

1536:v5RU/BMGgMRJTM8rHzm+wv9a8wSKoUOkifU:BRU/BM4fTM8rTm+wPwCUOO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/crle_1.91 by ewarez/Craagle_1.91.exe

Files

141c284cfc630e5698da5faa93e6a580
.rar
crle_1.91 by ewarez.zip
.zip
crle_1.91 by ewarez/Craagle.ini
crle_1.91 by ewarez/Craagle_1.91.exe
.exe windows:4 windows x86 arch:x86

28c6ef1128d2dc0d513ddf64919b7716

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
crle_1.91 by ewarez/YouKing.nfo
crle_1.91 by ewarez/eWarez News.url
.url
crle_1.91 by ewarez/info.nfo
crle_1.91 by ewarez/info.txt