Static task
static1
Behavioral task
behavioral1
Sample
crack.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
crack.exe
Resource
win10v2004-20240221-en
General
-
Target
crack.exe
-
Size
3.4MB
-
MD5
397ef5fd97134cb5d686a89eeab05eed
-
SHA1
61503ac7ab392acffba436a38b91f92b97407d8f
-
SHA256
9d0f3afd556a1f3a24cb22613357dcd04e7ac08d4e5eb22060106a932dacdce9
-
SHA512
a1f7560e4160eb62f23c6871314d3cdeb9db05e8653a9d05e5ce6f342ff9fb7f11316e9f0040196394a1725bcbc1e5010bc7a8763a5896a035da545be6aed6a2
-
SSDEEP
49152:Z6D0LjBn8/PkyiZYq6cVERznwOnqswS/KtJ78JEmm8PKXnPrADkMT39:7/VeJwYUQXqpAVmmm8PwnoT39
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource crack.exe
Files
-
crack.exe.exe windows:0 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
EinTim Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
EinTim Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ