Overview
overview
3Static
static
3crackMD/Crack/SP.exe
windows7-x64
crackMD/Crack/SP.exe
windows10-2004-x64
crackMD/Cr...rd.exe
windows7-x64
crackMD/Cr...rd.exe
windows10-2004-x64
crackMD/Crack1/SP.exe
windows7-x64
crackMD/Crack1/SP.exe
windows10-2004-x64
crackMD/pa...7X.exe
windows7-x64
1crackMD/pa...7X.exe
windows10-2004-x64
1crackMD/pa...SP.exe
windows7-x64
crackMD/pa...SP.exe
windows10-2004-x64
Static task
static1
Behavioral task
behavioral1
Sample
crackMD/Crack/SP.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
crackMD/Crack/SP.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
crackMD/Crack/password.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
crackMD/Crack/password.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
crackMD/Crack1/SP.exe
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
crackMD/Crack1/SP.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
crackMD/password.77/NOPASS7X.exe
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
crackMD/password.77/NOPASS7X.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
crackMD/password.77/SP.exe
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
crackMD/password.77/SP.exe
Resource
win10v2004-20231215-en
General
-
Target
89c576254f3907c811d4c563985a6605
-
Size
243KB
-
MD5
89c576254f3907c811d4c563985a6605
-
SHA1
5916990cddd02e1e853ba0d21a643d3e7890ec20
-
SHA256
e35dc73774b7889dc407095a220d7126122b4356dc40648714e28cd44efcb929
-
SHA512
088e3d64b1014d2a6538d9374e670936a91a5243ff0bf75cc6fe48f78b66e54481e9fa830607cab0ba41e926b92e405845ff41357849c60511efc4b7a6be960f
-
SSDEEP
6144:aWj50+UYBiYQIg4fXwzfyeHtvJT9LR1nE4nvFQhlSmbzFzzXZFM1vG3lS:aWl07fmZvwzftHtR71pvFQ2mt3Z8Gc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/crackMD/password.77/NOPASS7X.EXE
Files
-
89c576254f3907c811d4c563985a6605.zip
-
crackMD/Crack/Read.me
-
crackMD/Crack/SP.EXE
-
crackMD/Crack/Seven75.sp
-
crackMD/Crack/Seven77.sp
-
crackMD/Crack/file_id.diz
-
crackMD/Crack/password.exe
-
crackMD/Crack1/Read.me
-
crackMD/Crack1/SP.EXE
-
crackMD/Crack1/Seven75.sp
-
crackMD/Crack1/Seven77.sp
-
crackMD/Crack1/file_id.diz
-
crackMD/LomBkendDll.txt
-
crackMD/LomSevelDll.txt
-
crackMD/Zaaron.txt
-
crackMD/hash.txt
-
crackMD/password.77/NOPASS7X.EXE.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 178KB - Virtual size: 352KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 260KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.petite Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
crackMD/password.77/SP.EXE
-
crackMD/password.77/Seven75.sp
-
crackMD/password.77/Seven77.sp