GG[.]TrashCrack[.]rar

Sharing

Copy URL

Twitter E-mail

General

Target

GG.TrashCrack.rar
Size

4.9MB
MD5

bd9372931ca1269fd9901c56986f9737
SHA1

9f4d1653b3a4bffcd684c7eea6ed5880ca23efcf
SHA256

3c512b64702d8f6df4124c658d38b9187465c9476e663e5a93d47780b34b3f53
SHA512

dc0ac57c78259bcb1239a1a077a0c92840ec9685de0c5ff0df0a2b0e26cc678247ac73d701718ece6da602e9a198fbe2130c3244124a68e0b67b9522596cd182
SSDEEP

98304:Q9rhCffAB5V35TgQ1AO+AcqnYsv37HNZv5z9LsTZbOXYTSuulR:QhhUfAB5VRgQ1J+AcqYCHz99w5ORR

Score

1^/10

Malware Config

Signatures

Files

GG.TrashCrack.rar
.rar
CompPkgSup.dll
.dll windows:6 windows x64 arch:x64

7f8e5f00ce8f2e6817f745ed4bfb22ba

Code Sign

14:78:1b:c8:62:e8:dc:50:3a:55:93:46:f5:dc:c5:18
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/07/2015, 00:00

Not After

26/07/2018, 23:59

Subject

CN=NVIDIA Corporation,O=NVIDIA Corporation,L=SANTA CLARA,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

16:91:39:8c:09:24:77:d6
Certificate

Issuer

SERIALNUMBER=VxnFNSrl,CN=conspiracy.rip,OU=conspiracy,O=conspiracy,C=cn+C=CN,1.2.840.113549.1.9.1=#0c19636f6e7370697261637940636f6e737069726163792e726970,2.5.4.42=#130a636f6e73706972616379,2.5.4.13=#130a636f6e73706972616379,2.5.4.12=#130a636f6e73706972616379,1.2.840.113549.1.9.1=#0c19636f6e7370697261637940636f6e737069726163792e726970

Not Before

25/03/2008, 17:46

Not After

20/11/2024, 17:46

Subject

SERIALNUMBER=VxnFNSrl,CN=conspiracy.rip,OU=conspiracy,O=conspiracy,C=cn+C=CN,1.2.840.113549.1.9.1=#0c19636f6e7370697261637940636f6e737069726163792e726970,2.5.4.42=#130a636f6e73706972616379,2.5.4.13=#130a636f6e73706972616379,2.5.4.12=#130a636f6e73706972616379,1.2.840.113549.1.9.1=#0c19636f6e7370697261637940636f6e737069726163792e726970

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
ExtKeyUsageMicrosoftCommercialCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

66:d9:24:d9:4b:5d:f4:5f:78:7d:19:6b:67:3b:b7:87:f6:a6:53:8e
Signer

Actual PE Digest

66:d9:24:d9:4b:5d:f4:5f:78:7d:19:6b:67:3b:b7:87:f6:a6:53:8e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW

kernel32

AcquireSRWLockExclusive
FlsSetValue
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

wtsapi32

WTSSendMessageW

Sections

.text
Size: - Virtual size: 266KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fptable
Size: - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.retplne
Size: - Virtual size: 200B

.tls
Size: - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nigger0
Size: - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.nigger1
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Readme.txt

Sharing

General

Malware Config

Signatures

Files

7f8e5f00ce8f2e6817f745ed4bfb22ba

Code Sign

14:78:1b:c8:62:e8:dc:50:3a:55:93:46:f5:dc:c5:18Certificate

Extended Key Usages

Key Usages

16:91:39:8c:09:24:77:d6Certificate

Extended Key Usages

Key Usages

61:19:93:e4:00:00:00:00:00:1cCertificate

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

66:d9:24:d9:4b:5d:f4:5f:78:7d:19:6b:67:3b:b7:87:f6:a6:53:8eSigner

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

wtsapi32

Sections

.text Size: - Virtual size: 266KB

.rdata Size: - Virtual size: 73KB

.data Size: - Virtual size: 2.8MB

.pdata Size: - Virtual size: 6KB

.00cfg Size: - Virtual size: 56B

.fptable Size: - Virtual size: 256B

.retplne Size: - Virtual size: 200B

.tls Size: - Virtual size: 9B

_RDATA Size: - Virtual size: 500B

.nigger0 Size: - Virtual size: 3.4MB

.nigger1 Size: 5.3MB - Virtual size: 5.3MB

.reloc Size: 512B - Virtual size: 196B

14:78:1b:c8:62:e8:dc:50:3a:55:93:46:f5:dc:c5:18
Certificate

16:91:39:8c:09:24:77:d6
Certificate

61:19:93:e4:00:00:00:00:00:1c
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

66:d9:24:d9:4b:5d:f4:5f:78:7d:19:6b:67:3b:b7:87:f6:a6:53:8e
Signer

.text
Size: - Virtual size: 266KB

.rdata
Size: - Virtual size: 73KB

.data
Size: - Virtual size: 2.8MB

.pdata
Size: - Virtual size: 6KB

.00cfg
Size: - Virtual size: 56B

.fptable
Size: - Virtual size: 256B

.retplne
Size: - Virtual size: 200B

.tls
Size: - Virtual size: 9B

_RDATA
Size: - Virtual size: 500B

.nigger0
Size: - Virtual size: 3.4MB

.nigger1
Size: 5.3MB - Virtual size: 5.3MB

.reloc
Size: 512B - Virtual size: 196B