Static task
static1
General
-
Target
crackme.exe
-
Size
60KB
-
MD5
13b64db559d644b4df21b4267e37d97e
-
SHA1
2ef9a7504dddb18f0ecd7fce3a720dc131c6994d
-
SHA256
e43f181b53ce9b454618f037d6886350a11d8d33ecc5e1dee7629f02a1c7a3f9
-
SHA512
a820ca04f117614d2a9de51dec20b1ff057980e96c21ca924a3ac1a2e1bf0de8034e17966daab9e529c22b974028058a9fe1ecd2343f0af865ff8fca7f50dac4
-
SSDEEP
1536:n+8+vFgb42Bj5YlKkax316T/DBIMpUnL7:+89s2Bj5YlXil6rDBqL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource crackme.exe
Files
-
crackme.exe.exe windows:4 windows x86 arch:x86
158424a205ce8b9bdaed8353a1df1bd9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDialog
SendDlgItemMessageA
SendMessageA
GetDlgItemTextA
MessageBoxA
LoadIconA
DialogBoxParamA
kernel32
lstrcpyA
lstrlenA
LockResource
SuspendThread
RtlZeroMemory
SetThreadPriority
Sleep
ResumeThread
CreateMutexA
ExitProcess
FindResourceA
GetLastError
GetModuleHandleA
GlobalAlloc
GlobalFree
LoadResource
ExitThread
SizeofResource
lstrcmpA
CloseHandle
CreateThread
winmm
waveOutReset
waveOutGetPosition
waveOutOpen
waveOutPause
waveOutPrepareHeader
waveOutClose
waveOutRestart
waveOutUnprepareHeader
waveOutWrite
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ