Static task
static1
Behavioral task
behavioral1
Sample
Crack/ADC.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Crack/ADC.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
adc.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
adc.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
安装说明.url
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
安装说明.url
Resource
win10v2004-20231215-en
General
-
Target
51fcc36dc3257e09baa5986fe343da49
-
Size
4.7MB
-
MD5
51fcc36dc3257e09baa5986fe343da49
-
SHA1
c5dc1466d278c2df0e4f659c1b8e90dfce67656b
-
SHA256
f53efd341307eb474f61957a25e2166dd2659ce9d669173d666c0a26b78ca13e
-
SHA512
62f6d9ebb31a25ba13b788b94a021ca758b4d464489cc279ad9204d0db9d55a92640de38c9a53e288a9877e94d54c741a74708c4e5bc87d92652cf481ec27825
-
SSDEEP
98304:thWePKx++ByM2vNwunK19KjeqDVuDKfTQVTRETWxnRZ7TM8T1:RPS+1vS1aK6QV1fxnbth
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Crack/ADC.exe unpack001/adc.exe
Files
-
51fcc36dc3257e09baa5986fe343da49.rar
-
Crack/ADC.exe.exe windows:4 windows x86 arch:x86
63806ff4a38c6b4adb4b0dee64a03d38
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
comctl32
DestroyPropertySheetPage
winmm
PlaySoundA
mousehook
clearMyHook
user32
SetMenu
gdi32
CreateCompatibleBitmap
comdlg32
ChooseFontA
winspool.drv
ClosePrinter
advapi32
GetUserNameA
shell32
SHGetSpecialFolderLocation
oledlg
ord8
ole32
CoGetClassObject
olepro32
ord253
oleaut32
SysAllocString
wininet
InternetGetLastResponseInfoA
Sections
.text Size: 1.1MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Crack/CzW.reg
-
adc.exe.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
安装说明.url.url