FOR CRACK OPEN[.]exe | Triage

Sharing

General

Target

FOR CRACK OPEN.exe
Size

372KB
MD5

52549632071fc2881873c2e3287145fc
SHA1

3ebe72379b0a8d2f31670f9b0e6bcf313912c7c8
SHA256

1f0ad90e6e5280c6ce537498ee14d3b96432bb0f2bdc83cea723eea97b6037c2
SHA512

d6549305279d9502c80ced90b5a4b900e77966aa1668483658ccee2a92e7efea10e9a6e8dd92e6137b64f1e22cfc308843183c38a382b99814bb81f27e7b56f8
SSDEEP

6144:Y+TOGrT10wVzsV46NmW6RGazK0SHdVXZboRH+Q2SaeKHgw5Z9g1c92kWo:YNGPyYsV46NmpSHdVXZUt+Vrgzi9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FOR CRACK OPEN.exe

Files

FOR CRACK OPEN.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.\)w
Size: - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

./5>
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

. -h
Size: 369KB - Virtual size: 368KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ