P0
Static task
static1
Behavioral task
behavioral2
Sample
Imports32.dll
Resource
win11-20240802-en
Behavioral task
behavioral3
Sample
Imports64.dll
Resource
win11-20240802-en
General
-
Target
Hades_Cracked.rar
-
Size
971KB
-
MD5
69928e653805c52f5bd2ecdcc4b85fe6
-
SHA1
6a5d6d7083908f58a3eef752ad1048de523f63a6
-
SHA256
2c1efbe0041d34cbd7af25c8a254908019580745be236cd379018550f07a3a8b
-
SHA512
8713ced104d54ce0779a789fd622afd41c4cf21b11661a541186aa8c18f87729bbc01ac90256e2c5bd8205bcba3124579eebe8bdcb950e3f255359abf07b53d6
-
SSDEEP
24576:gXzX5bOWjcafwDFZHg+2DgEqUPpLq6TG1h65hd6qIxeDOAfh8:uJaWFwRapsEJRPTGf8/Ixiq
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/[email protected] unpack001/Imports32.dll unpack001/Imports64.dll
Files
-
Hades_Cracked.rar.rar
-
[email protected].exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 568KB - Virtual size: 567KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Imports32.dll.dll windows:5 windows x86 arch:x86
ee62b4f09eaf813cbb52a621c19aed0d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
CryptGenRandom
oleaut32
SafeArrayDestroy
winmm
timeGetTime
mscoree
CorBindToRuntimeEx
Exports
Exports
Sections
.IPREC1 Size: 226KB - Virtual size: 768KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.IPREC2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.IPREC Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Imports64.dll.dll windows:5 windows x64 arch:x64
ee62b4f09eaf813cbb52a621c19aed0d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
CryptGenRandom
oleaut32
SafeArrayDestroy
winmm
timeGetTime
mscoree
CorBindToRuntimeEx
Exports
Exports
P0
Sections
.IPREC1 Size: 244KB - Virtual size: 860KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.IPREC2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.IPREC Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE