CrackMeOne[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

CrackMeOne.exe
Size

1.9MB
MD5

7e09394d593ab03ab0cd76536b1c3e07
SHA1

b41107bb7203527a638f176d43c7654de8a56aa6
SHA256

525568eb9d695bd9a193701e9f4c4299f39038bc8551baa447e08dfb4f50c275
SHA512

f445b31512a0c0d27f527ed28b536a8e2383bd2e4adf514fd001ed7e129de989f778ff139a7e6e63078a47ed6b3bc553dccd039a5ce54b7cfb358f4cbc92bf99
SSDEEP

49152:Lk2CQsIsH/3Sd5vvQJECRCJMjva7umTu:4t4EPqiEkCJGaa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CrackMeOne.exe

Files

CrackMeOne.exe
.exe windows:5 windows x86 arch:x86

5c0e7249fd820608efb72003c7351c38

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoW
FormatMessageW
LeaveCriticalSection
GetFileAttributesW
TerminateProcess
ReplaceFileW
GetModuleFileNameW
CreateFileW
GetOverlappedResult
DisconnectNamedPipe
FlushFileBuffers
GetTempPathW
VerifyVersionInfoW
GetLastError
GetCurrentDirectoryW
GetProcAddress
MoveFileW
EnterCriticalSection
FindClose
CreateEventW
RemoveDirectoryW
WaitForMultipleObjects
GetModuleHandleA
CancelIo
IsDebuggerPresent
FindNextFileW
GetFileAttributesExW
QueryPerformanceFrequency
DeleteCriticalSection
GetCurrentThreadId
SetThreadAffinityMask
ReleaseMutex
DeleteFileW
GetVolumeInformationW
GetCommandLineW
AttachConsole
GlobalSize
GlobalLock
GlobalAlloc
GlobalUnlock
GetCurrentProcessId
TerminateThread
GetCurrentThread
CompareStringW
SetStdHandle
WriteConsoleW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetConsoleMode
GetConsoleCP
GetFileType
SetHandleCount
InitializeCriticalSectionAndSpinCount
HeapSize
IsProcessorFeaturePresent
GetStringTypeW
SetLastError
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
GetStdHandle
UnhandledExceptionFilter
LCMapStringW
RaiseException
GetCPInfo
GetStartupInfoW
HeapSetInformation
GetCommandLineA
RtlUnwind
GetSystemTimeAsFileTime
HeapReAlloc
GetTimeZoneInformation
GetDateFormatW
GetTimeFormatW
ExitThread
HeapFree
DecodePointer
EncodePointer
MultiByteToWideChar
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
LoadLibraryW
GetSystemDirectoryW
InitializeCriticalSection
WriteFile
OutputDebugStringW
ConnectNamedPipe
SetEvent
CreateDirectoryW
QueryPerformanceCounter
GetLogicalDriveStringsW
GetCurrentProcess
VerSetConditionMask
SetUnhandledExceptionFilter
FreeLibrary
SetEndOfFile
GetDriveTypeW
TryEnterCriticalSection
FindFirstFileW
CreateMutexW
ExitProcess
SizeofResource
LoadResource
WaitForSingleObject
FindResourceA
SetFilePointer
ReadFile
CreateFileA
Sleep
HeapDestroy
HeapCreate
HeapAlloc
SetThreadPriority
CreateThread
CloseHandle
SetEnvironmentVariableA
GetProcessHeap

user32

GetWindowInfo
MessageBeep
WindowFromPoint
GetClientRect
ShowCaret
LoadCursorW
TrackMouseEvent
GetParent
SetForegroundWindow
SetCapture
GetMessageExtraInfo
IsChild
GetWindowRect
ScreenToClient
GetWindowThreadProcessId
AttachThreadInput
DispatchMessageW
DefWindowProcW
CreateWindowExW
SendMessageTimeoutW
SetWindowLongW
PeekMessageW
GetWindowTextW
GetWindowLongW
RegisterClassExW
GetUpdateRgn
CloseClipboard
EnumDisplayMonitors
SetCursor
EndPaint
MoveWindow
CallWindowProcW
GetSystemMenu
EnumWindows
SetFocus
GetFocus
PostMessageW
UnregisterClassW
GetMessageW
DestroyWindow
ReleaseDC
GetDC
GetMessagePos
GetMessageTime
GetMonitorInfoW
DestroyIcon
ToUnicode
SetWindowTextW
SetClipboardData
SendMessageW
SetCaretPos
IsWindowVisible
GetSystemMetrics
ReleaseCapture
MessageBoxW
OpenClipboard
CreateCaret
GetActiveWindow
ShowWindow
SetLayeredWindowAttributes
EnumChildWindows
GetCursorPos
SetWindowPos
GetDesktopWindow
DestroyCaret
DestroyCursor
RedrawWindow
EmptyClipboard
EnableMenuItem
SystemParametersInfoW
GetClipboardData
GetAncestor
SetCursorPos
InvalidateRect
GetAsyncKeyState
GetWindowPlacement
TranslateMessage
MapVirtualKeyW
GetForegroundWindow
GetKeyboardState
GetCapture
GetIconInfo
CreateIconIndirect
BeginPaint

gdi32

EnumFontFamiliesExW
GetGlyphOutlineW
GetGlyphIndicesW
RestoreDC
GetPixel
CreateRectRgn
GetObjectW
StretchDIBits
GetKerningPairsW
CombineRgn
CreateRectRgnIndirect
GetRegionData
CreateBitmap
ExcludeClipRect
CreateDIBSection
SetMapperFlags
SetMapMode
GetOutlineTextMetricsW
CreateCompatibleDC
SelectObject
DeleteObject
RemoveFontMemResourceEx
GetDeviceCaps
CreateFontIndirectW
DeleteDC
SaveDC
GetTextMetricsW

comdlg32

GetOpenFileNameW
GetSaveFileNameW

shell32

SHGetMalloc
ShellExecuteW
Shell_NotifyIconW
ExtractAssociatedIconW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetSpecialFolderPathW

ole32

OleCreate
OleSetContainedObject
RegisterDragDrop
DoDragDrop
RevokeDragDrop
OleUninitialize
OleInitialize
CoTaskMemAlloc

oleaut32

SafeArrayUnaccessData
VariantInit
SafeArrayDestroy
SafeArrayAccessData
SafeArrayCreateVector
VariantClear
SysAllocString

ws2_32

setsockopt
recv
__WSAFDIsSet
closesocket
send
getsockopt
accept
select
WSAStartup
inet_ntoa

shlwapi

PathStripToRootW

winmm

waveOutGetPosition
waveOutOpen
waveOutPrepareHeader
waveOutReset
waveOutUnprepareHeader
timeBeginPeriod
timeGetTime
waveOutWrite
timeKillEvent
waveOutClose

imm32

ImmGetContext
ImmGetCompositionStringW
ImmSetCandidateWindow
ImmNotifyIME
ImmReleaseContext

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 314KB - Virtual size: 314KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5c0e7249fd820608efb72003c7351c38

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

shell32

ole32

oleaut32

ws2_32

shlwapi

winmm

imm32

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 314KB - Virtual size: 314KB

.data Size: 28KB - Virtual size: 110KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 39KB - Virtual size: 39KB

.reloc Size: 98KB - Virtual size: 97KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 314KB - Virtual size: 314KB

.data
Size: 28KB - Virtual size: 110KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 39KB - Virtual size: 39KB

.reloc
Size: 98KB - Virtual size: 97KB