Crackme[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Crackme.exe
Size

60KB
MD5

7db330f5d02388feb4a773620faf6736
SHA1

d2535bc62b81bbecb0ac3f7f100dd3ae77e6d47f
SHA256

94f117261dd7341f9b945ada175bcff4766662d63aaab3c544fe40615d054e46
SHA512

6dade0417571992752b678cb1be445e2e4d82f98d2154ca6611d9e00b3b0793eefaacea0202a4ad396ddd31919235950a5eaacc5d7b77a9ddad98655f5ebf07f
SSDEEP

768:sV8Gi6mb5zJr46mIxvW5vE/c5SStjfz6cwTcUUl5EUayPufwEwRA:AU79BtRkE/c8gfz+chl5EPyyoA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Crackme.exe

Files

Crackme.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

Crackme.pdb

Imports

mscoree

_CorExeMain

Sections

|H^-~
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ