Crack[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Crack.rar
Size

1.7MB
MD5

008aa5adecf62f13ebdd80e3714e753b
SHA1

4e65154ff5f862e8a64272e11ca40a63301a49aa
SHA256

070c6af65fed86f73b3f501ac37f0c0e081717d8687cf880704415c769abb092
SHA512

0a921f715b2fea31f6304bd338c0c2c3b1327ce2b4662a0efd53109937b0b484bfcfe36ce1189ff73f5de77cfe4b6ad684bdec24fc026f55637ea8fa73a688a8
SSDEEP

49152:NQhLE4JlHF7YAaed1ugoXMXAa90Kdczhs6sJ4gxL4c4QU:NQZEgHF72gln9nKh9sJP9/U

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Crack/AoK HD.exe
unpack001/Crack/steam_api.dll

Files

Crack.rar
.rar
Crack/AoK HD.exe
.exe windows:4 windows x86 arch:x86

846c0d07a253046ea729416bf703ccac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

d3d9

Direct3DCreate9

dsound

ord1

imm32

ImmAssociateContext
ImmGetContext
ImmGetOpenStatus
ImmGetDefaultIMEWnd
ImmReleaseContext
ImmNotifyIME
ImmSetOpenStatus

steam_api

SteamFriends
SteamAPI_UnregisterCallResult
SteamAPI_RegisterCallResult
SteamMatchmaking
SteamUser
SteamAPI_UnregisterCallback
SteamAPI_Shutdown
SteamAPI_RegisterCallback
SteamNetworking
SteamUtils
SteamClient
SteamAPI_RunCallbacks
SteamUserStats
SteamAPI_RestartAppIfNecessary
SteamAPI_Init
SteamRemoteStorage
SteamAPI_WriteMiniDump

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

winmm

timeEndPeriod
mixerGetLineInfoA
timeGetTime
mciGetErrorStringA
mciSendCommandA
mixerClose
mixerGetControlDetailsA
mixerGetLineControlsA
timeBeginPeriod
mixerSetControlDetails
mixerGetNumDevs
mixerOpen

zlibwapi

ord81
ord82
ord83
ord84
ord61
ord63
ord65
ord64
ord67
ord68
ord72
ord66
ord80

kernel32

GetStartupInfoA
InterlockedIncrement
InterlockedDecrement
TlsGetValue
TlsAlloc
IsDebuggerPresent
CloseHandle
ReleaseSemaphore
SetThreadPriority
SetPriorityClass
GetPriorityClass
GetThreadPriority
WaitForSingleObject
CreateSemaphoreA
GetCurrentProcess
GetCurrentThread
GetTimeFormatA
GetDateFormatA
GetFileAttributesA
CompareStringA
GlobalLock
GlobalAlloc
GlobalReAlloc
GlobalUnlock
GlobalHandle
GlobalFree
LockResource
LoadResource
FindResourceA
GetModuleHandleA
GetLastError
CreateDirectoryA
ReadFile
SetFilePointerEx
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
DeleteFileA
MoveFileA
VirtualFree
SetEndOfFile
WriteFile
FlushFileBuffers
FindClose
FindFirstFileA
CreateFileA
UnmapViewOfFile
FindNextFileA
GetTempPathA
MapViewOfFile
TlsSetValue
GetFileSizeEx
GetCurrentDirectoryA
GetTempFileNameA
OutputDebugStringA
GetProcAddress
FreeLibrary
WinExec
IsDBCSLeadByte
SetLastError
LoadLibraryA
QueryPerformanceCounter
GetTickCount
MulDiv
ReleaseMutex
CreateMutexA
GlobalMemoryStatus
MultiByteToWideChar
HeapFree
GetProcessHeap
GetFileInformationByHandle
CreateFileW
GetCommandLineA
GetFileInformationByHandleEx
OpenFileById
lstrlenW
GetFullPathNameW
HeapAlloc
HeapSize
RemoveVectoredExceptionHandler
SetEvent
InterlockedCompareExchange
GetCurrentThreadId
InterlockedExchange
AddVectoredExceptionHandler
VirtualQuery
OpenFileMappingA
GetTimeZoneInformation
GetComputerNameA
GetSystemTime
GetSystemTimeAsFileTime
HeapCreate
HeapDestroy
GetWindowsDirectoryW
GetSystemDirectoryW
RaiseException
ExitProcess
GetModuleFileNameW
CreateEventA
SizeofResource
FindResourceW
GetConsoleWindow
GetCurrentDirectoryW
GetEnvironmentStringsW
GetCommandLineW
GetStartupInfoW
GetFullPathNameA
GetModuleFileNameA
GetCurrentProcessId
GetModuleHandleExA
OpenEventA
WideCharToMultiByte
GetSystemInfo
IsProcessorFeaturePresent
EnterCriticalSection
InitializeCriticalSection
Sleep
DeleteCriticalSection
LeaveCriticalSection
GetFileSize
GetVersionExA
SetEnvironmentVariableA
lstrcmpiA
TlsFree
HeapReAlloc
GetStdHandle
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
GetFileType
SetStdHandle
LCMapStringA
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
TerminateProcess
UnhandledExceptionFilter
lstrcmpiW
SetUnhandledExceptionFilter
GetLocaleInfoW
CreateFileMappingA
VirtualAlloc

user32

InvalidateRect
PostQuitMessage
KillTimer
ShowWindow
IsZoomed
SetWindowTextA
SetCapture
ReleaseCapture
GetCapture
CharUpperA
AdjustWindowRect
GetUpdateRect
ValidateRect
DefWindowProcA
GetWindowThreadProcessId
IsWindow
GetFocus
SetWindowPos
GetMonitorInfoA
MonitorFromWindow
SetWindowLongA
FindWindowA
SystemParametersInfoA
BringWindowToTop
GetLastActivePopup
SetForegroundWindow
SetTimer
SetFocus
wsprintfA
MapVirtualKeyA
GetKeyNameTextA
CallWindowProcA
GetSysColor
SetSysColors
DrawTextExA
MoveWindow
GetCaretBlinkTime
CloseClipboard
GetClipboardData
OpenClipboard
IsClipboardFormatAvailable
GetKeyState
IsIconic
GetParent
GetWindowTextA
UpdateWindow
FillRect
LoadIconA
RegisterClassA
DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
GetWindowLongA
CreateWindowExA
DestroyWindow
SendMessageA
LoadStringA
MessageBoxA
GetCursorPos
SetClassLongA
GetSystemMetrics
SetRect
ScreenToClient
ClientToScreen
GetClientRect
GetDC
ReleaseDC
SetCursorPos
GetWindowRect
GetAsyncKeyState
DrawTextA
GetForegroundWindow
GetKeyboardState
MessageBeep
GetActiveWindow
WinHelpA
PostMessageA
LoadCursorA

gdi32

SetPaletteEntries
ResizePalette
GetSystemPaletteEntries
RealizePalette
SelectPalette
GetPaletteEntries
CreateFontIndirectA
DeleteObject
GetObjectA
LineTo
MoveToEx
CreateRectRgn
GetTextExtentPoint32A
SetBkColor
SetTextAlign
GetNearestPaletteIndex
CreatePalette
SetBkMode
GetTextMetricsA
SetTextColor
TextOutA
AddFontResourceA
GetStockObject
SelectObject
GetDeviceCaps
SelectClipRgn

comdlg32

GetOpenFileNameA

advapi32

RegOpenKeyExW
RegQueryValueExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyA

ole32

CoCreateGuid
CoCreateInstance
CoInitialize
CoUninitialize

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 800KB - Virtual size: 797KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.version
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Inf32Dat
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Crack/steam_api.dll
.dll windows:5 windows x86 arch:x86

1f81cc82b7e6074b7d13e61a0e42b893

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReleaseMutex
GetFileSize
FindFirstFileW
SetFilePointer
SetEndOfFile
CreateDirectoryW
GetTickCount
WriteFile
ReadFile
CreateFileW
GetLastError
FindClose
FindNextFileW
GetFileTime
DeleteFileA
GetPrivateProfileStructW
WritePrivateProfileStructW
MapViewOfFile
UnmapViewOfFile
WaitForSingleObject
WritePrivateProfileStringW
GetCurrentDirectoryW
CreateFileMappingW
OutputDebugStringA
DeleteFileW
GetCurrentProcess
GetModuleHandleW
GetProcAddress
GetCurrentProcessId
WriteConsoleW
SetStdHandle
TlsFree
LocalFree
CloseHandle
TlsAlloc
LocalAlloc
GetModuleFileNameW
GetFileAttributesW
TlsSetValue
TlsGetValue
GetPrivateProfileStringW
CreateMutexW
HeapReAlloc
LoadLibraryW
MultiByteToWideChar
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
WideCharToMultiByte
EncodePointer
DecodePointer
GetCurrentThreadId
GetCommandLineA
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
SetLastError
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
ExitProcess
GetStdHandle
Sleep
HeapSize
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
LCMapStringW
GetStringTypeW
FlushFileBuffers

user32

MessageBoxA

advapi32

CryptDestroyHash
GetUserNameA
CryptDestroyKey
CryptCreateHash
CryptImportKey
CryptReleaseContext
GetUserNameW
CryptVerifySignatureW
CryptAcquireContextW
CryptHashData

shell32

SHGetSpecialFolderPathW

Exports

Exports

GetHSteamPipe
GetHSteamUser
SteamAPI_GetHSteamPipe
SteamAPI_GetHSteamUser
SteamAPI_GetSteamInstallPath
SteamAPI_Init
SteamAPI_InitSafe
SteamAPI_IsSteamRunning
SteamAPI_RegisterCallResult
SteamAPI_RegisterCallback
SteamAPI_RestartApp
SteamAPI_RestartAppIfNecessary
SteamAPI_RunCallbacks
SteamAPI_SetBreakpadAppID
SteamAPI_SetMiniDumpComment
SteamAPI_SetTryCatchCallbacks
SteamAPI_Shutdown
SteamAPI_UnregisterCallResult
SteamAPI_UnregisterCallback
SteamAPI_UseBreakpadCrashHandler
SteamAPI_WriteMiniDump
SteamApps
SteamClient
SteamContentServer
SteamContentServerUtils
SteamContentServer_Init
SteamContentServer_RunCallbacks
SteamContentServer_Shutdown
SteamFriends
SteamGameServer
SteamGameServerApps
SteamGameServerNetworking
SteamGameServerStats
SteamGameServerUtils
SteamGameServer_BSecure
SteamGameServer_GetHSteamPipe
SteamGameServer_GetHSteamUser
SteamGameServer_GetIPCCallCount
SteamGameServer_GetSteamID
SteamGameServer_Init
SteamGameServer_InitSafe
SteamGameServer_RunCallbacks
SteamGameServer_Shutdown
SteamHTTP
SteamMasterServerUpdater
SteamMatchmaking
SteamMatchmakingServers
SteamNetworking
SteamRemoteStorage
SteamScreenshots
SteamUser
SteamUserStats
SteamUtils
Steam_GetHSteamUserCurrent
Steam_RegisterInterfaceFuncs
Steam_RunCallbacks
g_pSteamClientGameServer

Sections

.text
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RLD0
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

RLD1
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Crack/steam_api.ini

Sharing

General

Malware Config

Signatures

Files

846c0d07a253046ea729416bf703ccac

Headers

File Characteristics

Imports

d3d9

dsound

imm32

steam_api

version

winmm

zlibwapi

kernel32

user32

gdi32

comdlg32

advapi32

ole32

Sections

.text Size: 3.3MB - Virtual size: 3.3MB

.rdata Size: 800KB - Virtual size: 797KB

.data Size: 92KB - Virtual size: 1.1MB

.version Size: 4KB - Virtual size: 4B

Inf32Dat Size: 44KB - Virtual size: 43KB

.rsrc Size: 16KB - Virtual size: 14KB

1f81cc82b7e6074b7d13e61a0e42b893

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

Exports

Exports

Sections

.text Size: 86KB - Virtual size: 86KB

.rdata Size: 28KB - Virtual size: 28KB

.data Size: 7KB - Virtual size: 15KB

RLD0 Size: 13KB - Virtual size: 12KB

RLD1 Size: 136KB - Virtual size: 135KB

.reloc Size: 9KB - Virtual size: 8KB

.text
Size: 3.3MB - Virtual size: 3.3MB

.rdata
Size: 800KB - Virtual size: 797KB

.data
Size: 92KB - Virtual size: 1.1MB

.version
Size: 4KB - Virtual size: 4B

Inf32Dat
Size: 44KB - Virtual size: 43KB

.rsrc
Size: 16KB - Virtual size: 14KB

.text
Size: 86KB - Virtual size: 86KB

.rdata
Size: 28KB - Virtual size: 28KB

.data
Size: 7KB - Virtual size: 15KB

RLD0
Size: 13KB - Virtual size: 12KB

RLD1
Size: 136KB - Virtual size: 135KB

.reloc
Size: 9KB - Virtual size: 8KB