Static task
static1
Behavioral task
behavioral1
Sample
Launcher_with_cracktro.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
Launcher_with_cracktro.exe
Resource
win10v2004-20240704-en
General
-
Target
Launcher_with_cracktro.exe
-
Size
578KB
-
MD5
76994d152e26333b2090fbc98ed211f0
-
SHA1
71952f8fd5c3586d95e613f4a2b7af7a8f88012b
-
SHA256
ffcd210c6a1cbabb289bfeaaa4239f5c2be022f076cef58664448d2c4833263e
-
SHA512
49ed50526f7657085c10ffc6ae13c5bb3e5fb1e30c6e5383836788a4d560801639cfa310a7f3359901a384893fb415e4d122afdd0d66abdac4fa451a6f46c010
-
SSDEEP
12288:aJtztBknTweFnel0GjkNJaDUUKI5l2fMHj4:cGwe40GfKIOSj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Launcher_with_cracktro.exe
Files
-
Launcher_with_cracktro.exe.exe windows:6 windows x64 arch:x64
bdea72faa7c178793940c449af88402f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
ReadFile
CreateNamedPipeA
WriteFile
WaitForSingleObject
GetFileAttributesA
CloseHandle
CreateProcessA
GetModuleHandleA
WaitForMultipleObjects
CreateEventA
GetProcessHeap
HeapFree
HeapAlloc
QueryPerformanceCounter
GetCurrentThread
SetThreadPriority
Sleep
FormatMessageA
GetLocaleInfoEx
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileW
GetFileAttributesExW
AreFileApisANSI
GetLastError
GetModuleHandleW
GetFileInformationByHandleEx
MultiByteToWideChar
WideCharToMultiByte
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetCurrentProcess
TerminateProcess
LocalFree
user32
LoadIconA
RegisterClassExW
LoadCursorA
DestroyWindow
UnregisterClassA
PeekMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
DefWindowProcA
GetClientRect
GetAsyncKeyState
ShowWindow
SetWindowPos
SetWindowLongA
GetWindowLongA
CreateWindowExA
RegisterClassExA
GetDesktopWindow
msvcp140
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
??Bid@locale@std@@QEAA_KXZ
?_Xbad_function_call@std@@YAXXZ
_Thrd_id
?_Throw_Cpp_error@std@@YAXH@Z
_Thrd_join
_Cnd_do_broadcast_at_thread_exit
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Winerror_map@std@@YAHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
d3d12
ord101
D3D12SerializeRootSignature
dxgi
CreateDXGIFactory2
dcomp
DCompositionCreateDevice
winmm
waveOutClose
waveOutReset
waveOutGetPosition
waveOutPause
waveOutWrite
waveOutPrepareHeader
waveOutOpen
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memmove
memcpy
__std_exception_destroy
__std_exception_copy
__std_terminate
__C_specific_handler
__current_exception
__current_exception_context
_CxxThrowException
memset
api-ms-win-crt-stdio-l1-1-0
fflush
fgetc
fputc
fwrite
fgetpos
setvbuf
ungetc
fsetpos
fread
_fseeki64
_get_stream_buffer_pointers
__p__commode
_set_fmode
fclose
api-ms-win-crt-heap-l1-1-0
malloc
_set_new_mode
realloc
free
_callnewh
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
api-ms-win-crt-runtime-l1-1-0
abort
_initialize_onexit_table
_register_thread_local_exe_atexit_callback
_c_exit
_beginthreadex
terminate
_exit
exit
_initterm_e
_invalid_parameter_noinfo_noreturn
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-utility-l1-1-0
rand
srand
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
___lc_codepage_func
api-ms-win-crt-math-l1-1-0
__setusermatherr
sqrtf
cosf
sinf
powf
Sections
.text Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 474KB - Virtual size: 473KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 400B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ