win crack[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

win crack.exe
Size

8KB
MD5

be3c5cb782f65c60566ca62e9b1fc8f1
SHA1

7ae31cfbe1ca0e74b53830b7914a340eec388043
SHA256

d49015b8f17e4068f0e92da87ad2fc696346c9ab6e83f5c7067130c990d66527
SHA512

f41090a3835fe232208701b9da326e031c69552ec6b66542d56a8a813bad58a9110e2caa2972f63bcd20768db623a11cd4bf6183f64316d644bb45016bf8c8e5
SSDEEP

96:CV/aNCEjaczc6Ef82ZoGE9e9jV9zO+jX/t18V1K9pAfB1cvXUQczNt:O/aoyaczc64LdlV5OmX/4VgYfBai

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
win crack.exe

Files

win crack.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\swain\source\repos\win crack\win crack\obj\Debug\win crack.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ