CraxsRat-V6[.]5-Cracked[.]exe | Triage

Sharing

General

Target

CraxsRat-V6.5-Cracked.exe
Size

5.9MB
MD5

4bcb72f9bf7ca2bc7ff74bc137e035d3
SHA1

7c6ae2d6cec6151b3406be6b551aca78c033215c
SHA256

86e9eac30b3395cc792652301b2a0a5cef5e729cd0ed6ab12c016d61d5e3908f
SHA512

2c1715a5e787d0d10b0876c0415db90f42a7a829a67473080e24ce7642ed89c47627025fae93b897a18a7509fbb3d4e030f07902300fe3d4efc9ede085c62783
SSDEEP

98304:PBwXz7ydOMhjIJNfgXtAP4f18frP3wbzWFimaI7dlZQ8:Zk3y3jIjvgbzWFimaI7dlB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CraxsRat-V6.5-Cracked.exe

Files

CraxsRat-V6.5-Cracked.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\GHAAWY\Desktop\stub\stub\obj\x86\Debug\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 186KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 109B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ