crime[.]cc v1[.]5[.]exe

Resubmissions

30/07/2026, 00:56

260730-bafmqszsgx

30/07/2026, 00:53

260730-a8p4dszsgv3

Sharing

Copy URL Twitter E-mail

General

Target
crime.cc v1.5.exe
Size 15.7MB
Sample260730-bafmqszsgx
SHA256 ce45382e9f1ce4d4577ca938944eac4e7749f80e0a68cb9e4c49981bfe6b8fb3
MD5 b92d76e688a465d7395c56cd11c7b94f
SHA1 cb9f2f31dd1e9df83dd8d20f81d469661b4a0be2
SHA512 aed3f023a78d7b12a69cc85c610b554369f89cc0ccbcba363d43eaf59a67b3f67472af707af9cfdc8f38f953003748d272178f9ca0964e7579997267ff4fda8f
SSDEEP 196608:SBmmPOXppejfRQp62vGig7PAmkrFqg7PAmk1dyhZqL1lFQM4:WmmPOXppejfRQp61PAmkZ7PAmk+2L1
TLSH
T1CDF6AE42F7808A66C1568739C4639762D332BC09AF1357D7329CBE263FA36D05F6A381
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
crime.cc v1.5.exe

File Explorer

crime.cc v1.5.exe

.exe 15.7MB

crime.cc v1.5.exe

IMPHASH dd78ca1571c7a966e311b41d0edfce95
SHA256 ce45382e9f1ce4d4577ca938944eac4e7749f80e0a68cb9e4c49981bfe6b8fb3
MD5 b92d76e688a465d7395c56cd11c7b94f
SHA1 cb9f2f31dd1e9df83dd8d20f81d469661b4a0be2
SHA512 aed3f023a78d7b12a69cc85c610b554369f89cc0ccbcba363d43eaf59a67b3f67472af707af9cfdc8f38f953003748d272178f9ca0964e7579997267ff4fda8f
SSDEEP 196608:SBmmPOXppejfRQp62vGig7PAmkrFqg7PAmk1dyhZqL1lFQM4:WmmPOXppejfRQp61PAmkZ7PAmk+2L1
TLSH
T1CDF6AE42F7808A66C1568739C4639762D332BC09AF1357D7329CBE263FA36D05F6A381
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2373664

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\user12345\Downloads\crime.cc source v1.5 test\crime.cc source v1.3\build\Misty.pdb

shlwapi

PathFindFileNameW

ws2_32

inet_ntop freeaddrinfo ioctlsocket recv getaddrinfo inet_pton ntohl getsockopt send WSACloseEvent WSACreateEvent WSAEnumNetworkEvents WSAEventSelect WSAResetEvent WSAWaitForMultipleEvents closesocket WSAGetLastError ntohs WSASetLastError WSAStartup WSACleanup bind connect getpeername getsockname htons gethostname setsockopt socket sendto recvfrom listen htonl accept select __WSAFDIsSet WSAIoctl

advapi32

CryptEncrypt CryptImportKey CryptDestroyKey CryptDestroyHash CryptHashData CryptCreateHash CryptGetHashParam GetTokenInformation AddAccessAllowedAce GetLengthSid SetSecurityInfo InitializeAcl OpenProcessToken IsValidSid SystemFunction036 RegCreateKeyExA RegDeleteKeyA CopySid ConvertSidToStringSidA CryptReleaseContext CryptAcquireContextW

d3d11

D3D11CreateDeviceAndSwapChain

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

ntdll

RtlVirtualUnwind RtlCaptureContext RtlUnwind VerSetConditionMask RtlUnwindEx RtlLookupFunctionEntry RtlPcToFileHeader

kernel32

GetModuleFileNameW InitializeCriticalSectionEx CreateFileW GetCurrentThreadId GetSystemDirectoryW UnmapViewOfFile HeapSize GetTickCount64 GetLastError GetFileAttributesA HeapReAlloc HeapAlloc DecodePointer HeapDestroy DeleteCriticalSection GetCurrentProcessId GetProcessHeap GetModuleHandleW QueryFullProcessImageNameW CreateFileMappingW MapViewOfFile SetDllDirectoryW VirtualQuery LocalFree CreateFileA GetFileSizeEx ReadFile CreateFileMappingA ReleaseSRWLockExclusive AcquireSRWLockExclusive SetLastError FormatMessageW EnterCriticalSection LeaveCriticalSection LoadLibraryW SleepEx GetTickCount MoveFileExW WaitForSingleObjectEx GetEnvironmentVariableA GetStdHandle GetFileType PeekNamedPipe WaitForMultipleObjects VerifyVersionInfoW InitializeCriticalSection GetSystemInfo VirtualAlloc GlobalUnlock FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetCurrentProcess GetProcessId GetConsoleOutputCP WideCharToMultiByte GetConsoleMode GetCommandLineW GetCommandLineA WriteFile SetFilePointerEx FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetDriveTypeW IsProcessorFeaturePresent UnhandledExceptionFilter CreateProcessW DuplicateHandle TerminateProcess ExitProcess FreeLibraryAndExitThread ExitThread CreateThread FlsFree FlsSetValue FlsGetValue FlsAlloc OutputDebugStringW IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetStartupInfoW SetUnhandledExceptionFilter GetStringTypeW GetCPInfo EncodePointer LCMapStringEx GetFileInformationByHandleEx AreFileApisANSI GetExitCodeProcess FreeConsole ReadProcessMemory GetCurrentThread GlobalLock GlobalFree GlobalAlloc QueryPerformanceCounter Module32Next GetConsoleWindow CreateFile2 SetFileInformationByHandle AddDllDirectory SetDefaultDllDirectories HeapFree GetModuleFileNameA VirtualProtect GetFullPathNameW GetFileInformationByHandle GetFileAttributesExW FreeLibrary SetThreadPriority lstrcmpiW CloseHandle Process32FirstW Process32NextW CreateToolhelp32Snapshot OpenProcess GetDateFormatW Module32First GetProcAddress QueryPerformanceFrequency SwitchToThread LoadLibraryExW Sleep FindNextFileW FindFirstFileExW FindFirstFileW FindClose CreateDirectoryW GetCurrentDirectoryW GetLocaleInfoEx WakeAllConditionVariable WakeConditionVariable FormatMessageA InitOnceBeginInitialize InitOnceComplete GetModuleHandleExW CloseThreadpoolWork SubmitThreadpoolWork CreateThreadpoolWork FreeLibraryWhenCallbackReturns RaiseException GetLogicalProcessorInformationEx GetExitCodeThread SleepConditionVariableSRW AcquireSRWLockShared ReleaseSRWLockShared GetSystemTimePreciseAsFileTime LoadLibraryA MultiByteToWideChar GetLocaleInfoA GetModuleHandleA WaitForSingleObject GetTimeZoneInformation DeleteFileW CreatePipe SetStdHandle SetEndOfFile IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW ReadConsoleW WriteConsoleW

user32

EnumDisplayMonitors GetAsyncKeyState GetCursorPos ReleaseDC SetCursorPos ReleaseCapture IsWindowUnicode GetClientRect SetCursor SetCapture GetForegroundWindow GetKeyboardLayout TrackMouseEvent ClientToScreen GetCapture ScreenToClient GetDC LoadCursorA GetMessageExtraInfo GetKeyState SetClipboardData GetClipboardData EmptyClipboard CloseClipboard OpenClipboard SendInput FindWindowA ShowWindow IsWindowVisible SetWindowDisplayAffinity EnumWindows IsWindow GetWindowThreadProcessId MessageBoxA SetWindowLongA UpdateWindow RegisterClassExA PostQuitMessage UnregisterClassA DispatchMessageA MonitorFromPoint PeekMessageA TranslateMessage SetLayeredWindowAttributes CreateWindowExA DefWindowProcA GetMonitorInfoA GetSystemMetrics DestroyWindow SetWindowPos GetWindowRect

gdi32

GetDeviceCaps

shell32

SHGetFolderPathA ShellExecuteW ShellExecuteA

d3dcompiler_47

D3DCompile

dwmapi

DwmExtendFrameIntoClientArea

imm32

ImmReleaseContext ImmSetCompositionWindow ImmSetCandidateWindow ImmGetContext

winmm

timeBeginPeriod PlaySoundA

wininet

InternetGetConnectedState

wintrust

WinVerifyTrust

dnsapi

DnsQuery_A DnsFree

userenv

UnloadUserProfile

bcrypt

BCryptGenRandom

crypt32

CertOpenStore CertCloseStore CertEnumCertificatesInStore CertFindCertificateInStore CertFreeCertificateContext CryptStringToBinaryW PFXImportCertStore CryptDecodeObjectEx CertAddCertificateContextToStore CertFindExtension CertGetNameStringW CryptQueryObject CertCreateCertificateChainEngine CertFreeCertificateChainEngine CertGetCertificateChain CertFreeCertificateChain

Name

.text

Size

2.5MB

Virtual Size

2.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

11.3MB

Virtual Size

11.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

107KB

Virtual Size

107KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

488B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

crime.cc v1.5.exe

shlwapi

ws2_32

advapi32

d3d11

d3dx11_43

ntdll

kernel32

user32

gdi32

shell32

d3dcompiler_47

dwmapi

imm32

winmm

wininet

wintrust

dnsapi

userenv

bcrypt

crypt32

generic