Static task
static1
Behavioral task
behavioral1
Sample
RazDva cracked.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral2
Sample
RazDva cracked.exe
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral3
Sample
RazDva cracked.exe
Resource
win11-20241007-en
General
-
Target
logs_checker.rar
-
Size
11.1MB
-
MD5
93dc704b6c7d3c8b678948eda5f90c94
-
SHA1
9e6d2f70c20d558a768042b52a3af396819bbeb6
-
SHA256
3a6b7d6a34b1805b024f95fdcdc8fc13cc80ce13958b8ba913791963d346d1c4
-
SHA512
184a3cd4a8274c9657eb79c5f356a1fe351444e0d349c2b0ef62cbe55cc5673be2a50565e043d1156b1eedd3b91f5ab13bd37920f14839fb9a4206fdbd63ea50
-
SSDEEP
196608:EC6nAxx1r294mJKx2NlnxK1oZd60Xg/YZaSGLXiZLziBR1Wd4Fw:QA7yJKIN9OoG0XwLXiNziBR1Wsw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/RazDva cracked.exe
Files
-
logs_checker.rar.rar
-
RazDva cracked.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 444B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.enigma1 Size: 32.1MB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma2 Size: 620KB - Virtual size: 620KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Youtube/0подписчиков_14-05-53.txt
-
Youtube/0подписчиков_14-05-54.txt
-
Youtube/Coookies/Youtube_checked_info.txt
-
Youtube/Coookies/[─рэ ]-[Microsoft_1]_cookies.txt
-
Youtube/Coookies/[─рэ ]-[Steam_2]_cookies.txt
-
Youtube/Coookies/[─рэ ]-[Yandex_3]_cookies.txt
-
Youtube/Youtube_0+/0подписчиков_14-05-53.txt
-
Youtube/Youtube_0+/0подписчиков_14-05-54.txt
-
Youtube/Youtube_0+/Coookies/[─рэ ]-[Microsoft_1]_cookies.txt
-
Youtube/Youtube_0+/Coookies/[─рэ ]-[Steam_2]_cookies.txt
-
Youtube/Youtube_0+/Coookies/[─рэ ]-[Yandex_3]_cookies.txt
-
data/Coookies/[9100F]-[Avast Software_2]_cookies.txt
-
data/Coookies/[9100F]-[Google_3]_cookies.txt
-
data/Coookies/[9100F]-[Google_4]_cookies.txt
-
data/Coookies/[9100F]-[Opera Software_1]_cookies.txt
-
data/Coookies/[9100F]-[Steam_5]_cookies.txt
-
data/Coookies/[9100F]-[Yandex_6]_cookies.txt
-
data/Coookies/[Administrator]-[Google_1]_cookies.txt
-
data/Coookies/[Administrator]-[Microsoft_2]_cookies.txt
-
data/Coookies/[Administrator]-[Mozilla_1]_cookies.txt
-
data/Coookies/[PC]-[Brackets_1]_cookies.txt
-
data/Coookies/[PC]-[Microsoft_3]_cookies.txt
-
data/Coookies/[PC]-[obs-studio_2]_cookies.txt
-
data/Coookies/[Will Carter]-[Mozilla_3]_cookies.txt
-
data/Coookies/[aleks]-[Opera Software_1]_cookies.txt
-
data/Coookies/[aleks]-[Yandex_2]_cookies.txt
-
data/Coookies/[damir]-[Google_3]_cookies.txt
-
data/Coookies/[damir]-[Microsoft_4]_cookies.txt
-
data/Coookies/[damir]-[Mozilla_1]_cookies.txt
-
data/Coookies/[damir]-[Opera Software_2]_cookies.txt
-
data/Coookies/[i3]-[Microsoft_2]_cookies.txt
-
data/Coookies/[i3]-[Opera Software_1]_cookies.txt
-
data/Coookies/[i3]-[Yandex_3]_cookies.txt
-
data/Coookies/[old][Administrator]-[Google_2]_cookies.txt
-
data/Coookies/[parfe]-[Google_1]_cookies.txt
-
data/Coookies/[parfe]-[Microsoft_2]_cookies.txt
-
data/Coookies/[parfe]-[Packages_3]_cookies.txt
-
data/Coookies/[parfe]-[Yandex_4]_cookies.txt
-
data/Coookies/[rtols]-[Google_1]_cookies.txt
-
data/Coookies/[rtols]-[Microsoft_2]_cookies.txt
-
data/Coookies/[user]-[CCleaner Browser_1]_cookies.txt
-
data/Coookies/[user]-[Google_2]_cookies.txt
-
data/Coookies/[user]-[Google_3]_cookies.txt
-
data/Coookies/[user]-[Google_4]_cookies.txt
-
data/Coookies/[user]-[Google_5]_cookies.txt
-
data/Coookies/[user]-[Hola_9]_cookies.txt
-
data/Coookies/[user]-[Microsoft_6]_cookies.txt
-
data/Coookies/[user]-[Mozilla_10]_cookies.txt
-
data/Coookies/[user]-[Opera Software_11]_cookies.txt
-
data/Coookies/[user]-[Steam_7]_cookies.txt
-
data/Coookies/[user]-[Yandex_8]_cookies.txt
-
data/Coookies/[Василий]-[Google_1]_cookies.txt
-
data/Coookies/[Василий]-[Steam_2]_cookies.txt
-
data/Coookies/[Гастор]-[Google_2]_cookies.txt
-
data/Coookies/[Гастор]-[Opera Software_1]_cookies.txt
-
data/Coookies/[Гастор]-[Yandex_3]_cookies.txt
-
data/Coookies/[Евгений]-[Google_2]_cookies.txt
-
data/Coookies/[Евгений]-[Opera Software_1]_cookies.txt
-
data/Coookies/[Евгений]-[Steam_3]_cookies.txt
-
data/Coookies/[пользователь]-[Google_1]_cookies.txt
-
data/Coookies/[пользователь]-[Microsoft_2]_cookies.txt
-
data/Coookies/[пользователь]-[Mozilla_7]_cookies.txt
-
data/Coookies/[пользователь]-[Opera Software_10]_cookies.txt
-
data/Coookies/[пользователь]-[Packages_3]_cookies.txt
-
data/Coookies/[пользователь]-[Plarium_4]_cookies.txt
-
data/Coookies/[пользователь]-[Steam_5]_cookies.txt
-
data/Coookies/[пользователь]-[Tencent_12]_cookies.txt
-
data/Coookies/[пользователь]-[Yandex_6]_cookies.txt
-
data/Coookies/[пользователь]-[obs-studio_8]_cookies.txt
-
data/Coookies/[пользователь]-[obs-studio_9]_cookies.txt
-
data/Coookies/[пользователь]-[slobs-client_11]_cookies.txt
-
data/Coookies/[пользователь]-[view_13]_cookies.txt
-
pr.txt
-
settings.json