C:\Users\monika_zliechovcova\source\repos\X2\X2\obj\Debug\X2.pdb
Overview
overview
10Static
static
3Deluxe RDP...er.rar
windows7-x64
3Deluxe RDP...er.rar
windows10-2004-x64
10Deluxe RDP...ib.dll
windows7-x64
1Deluxe RDP...ib.dll
windows10-2004-x64
1Deluxe RDP...er.exe
windows7-x64
6Deluxe RDP...er.exe
windows10-2004-x64
10Deluxe RDP...ib.dll
windows7-x64
3Deluxe RDP...ib.dll
windows10-2004-x64
3Deluxe RDP...b2.exe
windows7-x64
3Deluxe RDP...b2.exe
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
Deluxe RDP Cracker.rar
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Deluxe RDP Cracker.rar
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Deluxe RDP Cracker/AxInterop.MSTSCLib.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Deluxe RDP Cracker/AxInterop.MSTSCLib.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Deluxe RDP Cracker/Deluxe RDP Cracker.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Deluxe RDP Cracker/Deluxe RDP Cracker.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Deluxe RDP Cracker/Interop.MSTSCLib.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Deluxe RDP Cracker/Interop.MSTSCLib.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Deluxe RDP Cracker/bb2.exe
Resource
win7-20240729-en
Behavioral task
behavioral10
Sample
Deluxe RDP Cracker/bb2.exe
Resource
win10v2004-20240802-en
General
-
Target
Deluxe RDP Cracker.rar
-
Size
185KB
-
MD5
e924bc7c6a4fca08226e692f0d1fe903
-
SHA1
de985dbb80cc9629cc9e1d5a06cd835631fd4d5c
-
SHA256
2b1f5cb7bed49da0723f88ea4faab85cc75e0155b744bd40e4471b2d4f0bb05b
-
SHA512
c1a731de5358bf3ca22a679a22c75d9a92d8051b18b170d139e4ff0ae1cd35f971b8bd04dfe3b3c32013530aad80c02cfeff54ae8fb1d50df015856577c776a5
-
SSDEEP
3072:IHCu4bzQNlXJdK/Bl8jpdY/F0mNvBXhIy3H7tCaFt0TVJFvc1ydk6pRWku0R6:SQaX2/sfiBXyeHhjtsfF06bu0R6
Malware Config
Signatures
-
Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack001/Deluxe RDP Cracker/AxInterop.MSTSCLib.dll unpack001/Deluxe RDP Cracker/Deluxe RDP Cracker.exe unpack001/Deluxe RDP Cracker/Interop.MSTSCLib.dll unpack001/Deluxe RDP Cracker/bb2.exe
Files
-
Deluxe RDP Cracker.rar.rar
Password: @CrypticNet
-
Deluxe RDP Cracker/AxInterop.MSTSCLib.dll.dll windows:4 windows x86 arch:x86
Password: @CrypticNet
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 203KB - Virtual size: 202KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Deluxe RDP Cracker/Deluxe RDP Cracker.exe.exe windows:4 windows x86 arch:x86
Password: @CrypticNet
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Deluxe RDP Cracker/Interop.MSTSCLib.dll.dll windows:4 windows x86 arch:x86
Password: @CrypticNet
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 350KB - Virtual size: 350KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Deluxe RDP Cracker/bb2.exe.exe windows:4 windows x86 arch:x86
Password: @CrypticNet
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 237KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ