5ab77f5633c5d40ad448c2f2[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ab77f5633c5d40ad448c2f2.zip
Size

31KB
MD5

68f771b2d40b2f054f188bf2f867ab31
SHA1

a2125593b845e232a2132d4134835523f0b223ff
SHA256

aa4ae48de6509eb40592f97654da60213c0df15a2a7a7fca593459cbd98fddf0
SHA512

2a1a7a9ecc48fc461c31ac230525295307d376af012dbc1879a0ab7d47b93105e457d577e06f99ade38d7a4059aca9aa09d8f46069906c02588abfd3908f6014
SSDEEP

768:bRhJUVuWlFzcLGYG/VskVGWnRQ0oN5akus3ZWIU:7VWvcLGYG/y4GWnRQvbapSMIU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/crackme.exe

Files

5ab77f5633c5d40ad448c2f2.zip
.zip

Password: crackmes.de
lafarge-crackme2.zip
.zip

Password: crackmes.de
crackme.exe
.exe windows:4 windows x86 arch:x86

Password: crackmes.de

158424a205ce8b9bdaed8353a1df1bd9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
SendDlgItemMessageA
SendMessageA
GetDlgItemTextA
MessageBoxA
LoadIconA
DialogBoxParamA

kernel32

lstrcpyA
lstrlenA
LockResource
SuspendThread
RtlZeroMemory
SetThreadPriority
Sleep
ResumeThread
CreateMutexA
ExitProcess
FindResourceA
GetLastError
GetModuleHandleA
GlobalAlloc
GlobalFree
LoadResource
ExitThread
SizeofResource
lstrcmpA
CloseHandle
CreateThread

winmm

waveOutReset
waveOutGetPosition
waveOutOpen
waveOutPause
waveOutPrepareHeader
waveOutClose
waveOutRestart
waveOutUnprepareHeader
waveOutWrite

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
readme.1st