Behavioral task
behavioral1
Sample
crack.exe
Resource
win7-20240903-en
General
-
Target
crack.exe
-
Size
29KB
-
MD5
0cd0c4850085dc2d62122970e5ad6e8c
-
SHA1
3d911ab00030d5f78ae92e8a69b64dc843b503d9
-
SHA256
f2e1738dd3d59485693b7e9fe8375cb543c8c381448813ea74ea3e185bf94ae3
-
SHA512
edb6c68c2634b03371a5a74270c4b3c0f75ca68171b88f6df19bcc0bc57cdc7674311f0ac69550ee686307f33b824a4fa7a96fc23f9e89b1bc470b423f36b833
-
SSDEEP
768:a3DenL2Arzw8P/gR6lfzGRP4LysGOnhIJAeZXnbcuyD7U:agLDkbR6l7zLDTnXeJnouy8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource crack.exe
Files
-
crack.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE