[8: �*l�}8��V���*4�8���7�}��3u��R� ���n�Q� uV-�+\�I`+�! ��8�8�]���h��)�G�\����]�{�'�p :�H��{����xD39��;��0-,fC�삘8aDjU^v��g��T,��z��_��G�C�m��SE���B��-��){#���)0i�Ʉ��JC��,MPj�,,�����Y�E)<:�Jj�[�˕���@=��n����M���XQ�v��T6�������/ m:k/��E.}�dEa�D�����5�����߃J#BZD�n \��/���dl㾉*�!�l.��Y(`rI�{���T�C��?DbKtڹXA���s��u�,���~�S��Wk�B�tO2-�/ߣӶ�j24z%`vi��]W( ��8�ݦQV>�����Q�ʹ+��������m��-p�QCp�i���Q�Xzg�=�|����K\����qgq��$�֜F,8`v�v�pa_�G�ҿ+O=E�~��|�S6��exZ!�(�&fiF�o�4�<mn��.hc�3����&���kq���2�.i���`���AP^b�$��*F��4�q���~Q��ف�F���U������呿���g�T���g�»Je6#~�����[ڶ걭��I�Lz�z;�<�,�����UX���>��f�%D�j�����Y�I�t*[��Hb�(mi6�kY�⬚YC��01��7��b?l���S�Eq:H�/CV9�sX$�x���E��Jy��LW���m!W6e�xUQ�K��&@I�$z>��*ӂy�җ��Vp�M��T�QF���*��U�.u�<pF��YΕ�����!�)W`�pvfz����<�3�խض�%}[J�h���i�Db��S�^�jH�V��J �頗����B��'0�7lA�, ϡ�V�o5�ۇ-c��6�* �[B@��ym�Z\�NO�}�yY��3���Z�r�3���Ʒ�(E^�l"=��q��1�<kA�؆�Tw�O�K��2/M$�:�U�6l%F/�N��6A�{m6��_x^�v���(������������;"�ˠt���;�Ç'[�;n�z�ӒK;�3ib�:��D��B��A�F2\���?a�l`b{��Zv&89��ED8�Z�^�����R�?�ʆg� N�_��r�|����Zo�n��/Z����%J�<Gl)�oj1�N ��<g�xyW:;`Q[��/��{|��>��32�㢹n7��J�E��4�]UJ����T}okB��;`��ê�|*���´�A3L�є4�� ��t����o��������ĄS����{�d��0����Ĵw��N@�i�ό�F[�C|�a�'q���� ir����)� ;R��P��C\��m�����6�sn*L7�rp%�(�5��$�Ag�pr���)�$<��ٙZ�2�}ؓ�m�ǺF��¦�38Ґ?Uv�J�7l'{N�_{'�E�/+-���P?��P)�ڛ�� �������٪0|�X�w]W�+y�j�/� +�5�>�.��x����70�襜HF��|gm1;�� �j���/�]�~�K=�7�-Z�\Jx���J���d����teC�V������F�&�<�����&���_NX"S���U���S*�8<�x���B�,ku}���C;�=�kZ3��bE� ����>�PV�ψYd'��~+K�g����#0A��w��Q9���A�Ё�[O��ԟ�����E����b#�f!= Q��i��iȡ�.�9��*Օ��0��!0������<���f�L��!s�����w�┍Ϻ)3�u�V2\��XL�Y�R�X�s៧��b�Y��l���(8�Hȱ����z��B�"{�A!����Qmb�a�ECO�&�7�����M�IC)$�a�i1|J6�E98��CW����PU]4�{��䍖8��˺�{"�Ü$*Sȕ�n|m� �Ub�-�x���+몹�3غ�`?�� ��1+���I@�7���<?#Z9t;��N��-��(� �=b�����ݓ`t�ة��,�e`��O�������4���r_�BJ/;�#�p��U|g �U�qI�r���ۙ���.V@�[�9��������ʣJ|[����#�`9���\�pf=�#�t��ځ���in�IX�&r'e`��.c� s��n�ξ��{��Ŷ�ʹͬUZ��9Wdz�����0�xꬨ��^��z$���-p#��O�j����а ���'ץ>P7��- �mU;[���(\�5�OW�q jcn��t�[\���{a�`ܠ��"�?O�����g����k�W�<�"�O�<FV���,oI�cp�D3K�6m�ԛ�EJו�~�����W�[c��;0�<���lMH�B��H� ,�X-�%�ճcUn��RohvUu�y�i� \�}'@!�Mɡ�ȽP�r@����$���w���.U 0�O�ID�Ѥ��rlp�D�?�,J�X�i���~ҨEQ�m`wi^��PF-l�o����w֒�'���N�ph%ק��zp�H�=��6W|d�������v+]��qF^i@���Д�DC@���>�Q���T �C�)�����.\U�_ }�2SD9Z;�v��G��H� /.N��e�tcL�d馾x��y���L e�ڶ���Iӧ-�+��)>L�%���XyZ��ki�P��L��Q�*�����_��~!�$�3�Yg�7=70��k�m��*M?Χ1�oc��L��Ѝ��� �Dޖ:*y�e�p������}{�([�L��PJ�T'\��s-CEn�W�%���S��ޠ`�#�ϰfl-��,��+c�Z=6.Ⲧ�o�B4�nT���<ڴ"oV-%p�����N8Xi�3�������{6�'Kz�L �o>5�k��������k��I�Υ�?g�m�"K��W&x�U��D5��z�W5W���W%x^�)ˡ���$$>�@k.�B�S��ެ?� ���&.��S��;��|ޅG��%)[�U��0d����Є ХI�\����ytA����;�_��g���NmZw�^_�/��)K�yn�+!>�����������(��+�&��=�L56��C�Q��? �.��ac�m�y�(7��C|��B��l1��E9�����N@;�B}0�5��A��#��b��ϜӿjM@��d�fC+v"6/ H#7�� >�Z�� �ig�Ф1��b�8����DE�^Z0A5�Ѧ�� �N��}�RN*�z�"��!G C��m�c?,��e4ǒr�q��;���O��D,(%����^ ����]K�^b,ڷ�R��$����2�T<� N���ҁH��&&~��'�'�(X;��tfς���X�W%�i�^�c��kzl���>V��v�yzS��,�<�u'������;eV$W�y$U�}ML'C��Y-�~�wd t�C����u�e�7���^�g��;M.�9H~�;&/%c�����]o��A�\�t��?����A�J"�JC�{n۪`._�)� h�;m ��1�wuF��nJȾ�q!�;M�]��\:�2���w�OWY���븙{Dj�����A����� <5���˞}Q�����q�́�����<����I�[0�OP3��w�A��oÝ��/�x� � /����'�?�iӦ�$e�&�~Nx��z�=\���$��N�T�X�s��՚�+��~�uzp��:3�\�A�����1t��������BP����t�Nˢ/���/���S�$
Static task
static1
General
-
Target
Cracked_protected.exe
-
Size
99.0MB
-
MD5
cb7d77192c18e55b79563e78431dedf8
-
SHA1
fd536cfa5611eeddffc9bff1275b668b8b81e5d9
-
SHA256
f0bc58d1a12bd9c8f9a5fe36b9aead44086668ec00133a92cce43c3fa2648b80
-
SHA512
73d98a793a5da0a35da7ae3c8d630ba301739b10c45a944baf2173bf8a94823ba33f9ce8749d21a87edce783b68518bcd381dc1ea536860682a4f58c3058df16
-
SSDEEP
98304:r20AWZRMRTq7M27cA4Z4sgA0EIJP5kaR+wKkAgakKeGG:rT02JwAHANIDk2+pkGkKzG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Cracked_protected.exe
Files
-
Cracked_protected.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 1.2MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 8.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE