Overview
overview
10Static
static
3Wave.JohnP...ed.rar
windows10-1703-x64
8CefSharp.C...me.dll
windows10-1703-x64
1WaveWindow...ed.exe
windows10-1703-x64
10bin/Background.mp4
windows10-1703-x64
6bin/lz4.dll
windows10-1703-x64
1bin/wolfssl.dll
windows10-1703-x64
1bin/xxhash.dll
windows10-1703-x64
1bin/zlib1.dll
windows10-1703-x64
1bin/zstd.dll
windows10-1703-x64
1cracked by...lx.txt
windows10-1703-x64
1d3dcompiler_47.dll
windows10-1703-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Wave.JohnPrlx.cracked.rar
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
CefSharp.Core.Runtime.dll
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
WaveWindowsCracked.exe
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
bin/Background.mp4
Resource
win10-20240404-en
Behavioral task
behavioral5
Sample
bin/lz4.dll
Resource
win10-20240404-en
Behavioral task
behavioral6
Sample
bin/wolfssl.dll
Resource
win10-20240611-en
Behavioral task
behavioral7
Sample
bin/xxhash.dll
Resource
win10-20240404-en
Behavioral task
behavioral8
Sample
bin/zlib1.dll
Resource
win10-20240404-en
Behavioral task
behavioral9
Sample
bin/zstd.dll
Resource
win10-20240404-en
Behavioral task
behavioral10
Sample
cracked by JohnPrlx.txt
Resource
win10-20240404-en
Behavioral task
behavioral11
Sample
d3dcompiler_47.dll
Resource
win10-20240404-en
General
-
Target
Wave.JohnPrlx.cracked.rar
-
Size
10.3MB
-
MD5
a502e43649c31bd6007912d68b37cad1
-
SHA1
9076425d466c78f4cf458ab9913fb0880fecf7d0
-
SHA256
6d5ff2230c713e9372d23989c3ea247d814ffc6f19380be86f7bccf3c0b6ff91
-
SHA512
cebdaf98e4406fcb95c3086c976c16313230c2630c610d542c61e1c8a655c28a4a6555d9c40a8faed760827d24613acc624547390d66e59f1a77ef7e45ff7ca0
-
SSDEEP
196608:3xLL5xzen4Pdl4KmMJpgkGTSLv+gaiPBgy/fxKKXWK22Ddd:hPKn4PYhT4ai/xPGQdd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/WaveWindowsCracked.exe
Files
-
Wave.JohnPrlx.cracked.rar.rar
Password: wavecracked
-
CefSharp.Core.Runtime.dll
-
WaveWindowsCracked.exe.exe windows:4 windows x86 arch:x86
Password: wavecracked
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 7.6MB - Virtual size: 7.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
bin/Background.mp4
-
bin/lz4.dll
-
bin/wolfssl.dll
-
bin/xxhash.dll
-
bin/zlib1.dll
-
bin/zstd.dll
-
cracked by JohnPrlx.txt
-
d3dcompiler_47.dll