crack[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
crack.exe
Size 479KB
Sample240529-deq1dage97
SHA256 99bd6ee7da4edad447fba55a6b11538927013586ef617e70a0ff4765adae22db
MD5 eb580bc45a382527d2f1ff80c542bd9d
SHA1 0b95c965fe80c9b9d9270be74817a8771bb02daa
SHA512 a3f4563d4ee61a0bdc612c849f13711af961514cbe3ce48ab9af0b905c8df278f470e902bc50b64d95055f2bd69fd288bba1dd0405caf9e4a42585cdf6b3e23c
SSDEEP 6144:pTNlPsSiE0grIlHAjNL7S8AtKZnbr8qz6xzS06d17GQxAAXcpGZ5wIzkyOD+lRXs:pFR0gsAjNL6tQbr8w6xely1JcXgDsLm
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
crack.exe

File Explorer

crack.exe

.exe 479KB

crack.exe

IMPHASH 03f91bdad97904026326fc3ace33b897
SHA256 99bd6ee7da4edad447fba55a6b11538927013586ef617e70a0ff4765adae22db
MD5 eb580bc45a382527d2f1ff80c542bd9d
SHA1 0b95c965fe80c9b9d9270be74817a8771bb02daa
SHA512 a3f4563d4ee61a0bdc612c849f13711af961514cbe3ce48ab9af0b905c8df278f470e902bc50b64d95055f2bd69fd288bba1dd0405caf9e4a42585cdf6b3e23c
SSDEEP 6144:pTNlPsSiE0grIlHAjNL7S8AtKZnbr8qz6xzS06d17GQxAAXcpGZ5wIzkyOD+lRXs:pFR0gsAjNL6tQbr8w6xely1JcXgDsLm
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

156322

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapCreate GetModuleHandleA CreateEventA WaitForSingleObject CloseHandle HeapDestroy GetModuleFileNameW lstrlenW HeapFree HeapAlloc MulDiv GetProcessHeap GetStartupInfoA

user32

GetDlgCtrlID GetScrollRange DestroyIcon KillTimer DrawIcon GetClientRect GetScrollPos LoadStringW FillRect PostMessageW CreateIcon ShowWindow GetCursor DeleteMenu EndMenu DrawFocusRect BeginPaint GetDCEx DefMDIChildProcW CharUpperBuffW CreateMenu GetScrollInfo GetMenuItemInfoW MsgWaitForMultipleObjectsEx ReleaseDC GetClassInfoExW GetWindowTextW DestroyWindow EndPaint EnableWindow CreateWindowExW LoadBitmapW CreateAcceleratorTableW DrawMenuBar PeekMessageW GetSystemMenu RegisterClassW IsDialogMessageW IsZoomed CopyImage GetMenuStringW IsIconic ShowCaret InsertMenuW SetTimer LoadCursorW DefFrameProcW LoadIconW GetClassInfoW DestroyMenu FrameRect DispatchMessageW SetMenuItemInfoW SetScrollPos DestroyCursor

gdi32

Pie RectVisible StretchBlt GetTextMetricsW Polygon CreateCompatibleBitmap GetEnhMetaFileHeader CreatePalette GetStockObject CreateICW MoveToEx GetWindowOrgEx CreateSolidBrush SetAbortProc SetTextColor SetBkMode RestoreDC PolyBezierTo RoundRect AngleArc CreateDCW SetRectRgn

ole32

CoTaskMemAlloc CoCreateInstance CoUninitialize CoTaskMemFree IsEqualGUID CoInitialize OleUninitialize OleInitialize

oleaut32

SafeArrayGetElement SafeArrayAccessData VariantCopyInd SysAllocStringLen SysReAllocStringLen GetErrorInfo SafeArrayPtrOfIndex SafeArrayCreate SysFreeString VariantCopy VariantInit SafeArrayGetUBound SafeArrayUnaccessData VariantClear VariantChangeType SafeArrayPutElement SafeArrayGetLBound

msvcrt

_initterm __getmainargs _acmdln exit _XcptFilter _exit memcpy qsort wcsrchr memset wcschr _adjust_fdiv __p__commode __p__fmode __set_app_type _except_handler3 _controlfp __setusermatherr

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

Name

.text

Size

149KB

Virtual Size

149KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.textbss

Size

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

324KB

Virtual Size

324KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

68B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

crack.exe

kernel32

user32

gdi32

ole32

oleaut32

msvcrt

version

generic