Meta-cracked[.]exe

General

Target
Meta-cracked.exe
Size 12.5MB
Sample260731-3drb7aac84
SHA256 35f64e616c07ae66e2b3c2424f6900f457aa9170f987da48bf821d00a3db7731
MD5 d02fb9153c767ce18fcc4c639e969cbc
SHA1 52fff2bb3ebc8d3f265720338d942da232b87948
SHA512 03c40c4003011616963962fab9b9690f29352edd0af986cabe7cb9a8b1582f95eb8530124c7f7b02532e6cda01b8a2dab19c5532cf2b8a760f8e7dcdc52717f8
SSDEEP 393216:bc8IDZUnCVH5STNaguCr+j+GTX+p8+DkpuOKL:EU5kguXjpzbEkputL
TLSH
T14ED6338FE95920F2C0FAD03CD591651AFD3074AB4BB12BC7A7951A861F237E8893E741
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Meta-cracked.exe

File Explorer

Meta-cracked.exe

.exe 12.5MB

Meta-cracked.exe

IMPHASH a6bd8c3c9d7d181e4800a15616cebdc9
SHA256 35f64e616c07ae66e2b3c2424f6900f457aa9170f987da48bf821d00a3db7731
MD5 d02fb9153c767ce18fcc4c639e969cbc
SHA1 52fff2bb3ebc8d3f265720338d942da232b87948
SHA512 03c40c4003011616963962fab9b9690f29352edd0af986cabe7cb9a8b1582f95eb8530124c7f7b02532e6cda01b8a2dab19c5532cf2b8a760f8e7dcdc52717f8
SSDEEP 393216:bc8IDZUnCVH5STNaguCr+j+GTX+p8+DkpuOKL:EU5kguXjpzbEkputL
TLSH
T14ED6338FE95920F2C0FAD03CD591651AFD3074AB4BB12BC7A7951A861F237E8893E741
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

146320

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shell32

SHGetKnownFolderPath

ole32

CoTaskMemFree

user32

MessageBoxW

kernel32

GetStartupInfoW SetEndOfFile WriteConsoleW HeapSize CreateFileW GetProcessHeap GetStdHandle CloseHandle WaitForSingleObject GetExitCodeProcess CreateProcessW GetComputerNameA MultiByteToWideChar GetConsoleScreenBufferInfo SetConsoleTextAttribute SetConsoleTitleW LocalFree FormatMessageA GetLocaleInfoEx CreateDirectoryW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW GetFileInformationByHandle GetFinalPathNameByHandleW SetFileInformationByHandle CreateFile2 AreFileApisANSI GetLastError GetModuleHandleW GetProcAddress CopyFile2 GetFileInformationByHandleEx WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter RtlUnwind SetStdHandle RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree IsProcessorFeaturePresent WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter VirtualProtect LoadLibraryExW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW IsValidCodePage GetACP GetOEMCP HeapReAlloc GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW

Name

.text

Size

285KB

Virtual Size

285KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

12.2MB

Virtual Size

12.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

20KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

Meta-cracked.exe

shell32

ole32

user32

kernel32

generic