karity-crackme-G[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
karity-crackme-G.exe
Size 476KB
Sample260708-eftnbsat2z
SHA256 3af02054c61663cd013140e1a9c6db1f81e304c461987e288371fb78533c6eeb
MD5 d6ec02e65276e21f0afdd0bb793f4d0d
SHA1 a54603ffca101f0ad803f97f57d05991d46b408c
SHA512 715de64b814e274431b10b79e8d8492e98b582118b20675d78e1bd08d782767315dec0e0cfee53e3d75b6146904b5262c855872eceb0887e06ae7a81ba8150fd
SSDEEP 6144:5wfXZoCAWTWra0+J6kNSkXspUNVHYlzm:ggaWra5dXsGHYE
TLSH
T108A4C50B7293E6F9C217C0348E96DBB67431BC141F256E2F3694F73E1D34D520AAA968
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
karity-crackme-G.exe

File Explorer

karity-crackme-G.exe

.exe 476KB

karity-crackme-G.exe

IMPHASH d873caa8e4539454be62df7ca519c0d5
SHA256 3af02054c61663cd013140e1a9c6db1f81e304c461987e288371fb78533c6eeb
MD5 d6ec02e65276e21f0afdd0bb793f4d0d
SHA1 a54603ffca101f0ad803f97f57d05991d46b408c
SHA512 715de64b814e274431b10b79e8d8492e98b582118b20675d78e1bd08d782767315dec0e0cfee53e3d75b6146904b5262c855872eceb0887e06ae7a81ba8150fd
SSDEEP 6144:5wfXZoCAWTWra0+J6kNSkXspUNVHYlzm:ggaWra5dXsGHYE
TLSH
T108A4C50B7293E6F9C217C0348E96DBB67431BC141F256E2F3694F73E1D34D520AAA968
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5088

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

gdi32

CreateCompatibleDC CreateDIBSection CreateSolidBrush DeleteDC DeleteObject SelectObject StretchBlt

kernel32

CloseHandle CreateEventA CreateSemaphoreA DeleteCriticalSection DuplicateHandle EnterCriticalSection FormatMessageA GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetHandleInformation GetLastError GetModuleHandleA GetModuleHandleW GetProcAddress GetProcessAffinityMask GetSystemTimeAsFileTime GetThreadContext GetThreadPriority GetTickCount InitializeCriticalSection IsDBCSLeadByteEx IsDebuggerPresent IsProcessorFeaturePresent LeaveCriticalSection LoadLibraryW LocalFree MultiByteToWideChar OpenProcess OutputDebugStringA QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReleaseSemaphore ResetEvent ResumeThread RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetEvent SetLastError SetProcessAffinityMask SetThreadContext SetThreadPriority SetUnhandledExceptionFilter Sleep SuspendThread TerminateProcess TlsAlloc TlsGetValue TlsSetValue TryEnterCriticalSection VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WideCharToMultiByte

msvcrt

__C_specific_handler ___lc_codepage_func ___mb_cur_max_func __getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _beginthreadex _cexit _commode _endthreadex _errno _fmode _initterm _read _setjmp _strdup _vscprintf _vsnprintf abort atexit calloc _write exit fprintf fputc fputs free fwrite getenv localeconv longjmp malloc mbstowcs memchr memcmp memcpy memmove memset printf puts rand realloc signal srand strchr strcmp strerror strlen strncmp strtoul vfprintf wcslen

user32

AdjustWindowRect BeginPaint CreateWindowExA DefWindowProcA DispatchMessageA EndPaint FillRect FrameRect GetClientRect GetMessageA InvalidateRect LoadCursorA PostQuitMessage RegisterClassA SetTimer ShowWindow TranslateMessage UpdateWindow

Name

.text

Size

163KB

Virtual Size

162KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

544B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

279KB

Virtual Size

279KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

karity-crackme-G.exe

gdi32

kernel32

msvcrt

user32

generic