Cracked[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Cracked.exe
Size 47KB
Sample260802-rdbe7abb26
SHA256 d0e1c3a7ece331422feadc135278119dd582b695f21c8d95374b3851eed600e8
MD5 736ac0c2a96f48ab211a02dbc023e131
SHA1 aac741c7996b2f5fcba2bcf2a808ae8960c0e032
SHA512 c9cbf0b649dd87e5534de286d1b567080454facdba3ba09f1c2056ae8449f82470f6a70575f0e2018ab58966bec1a609f42ef7c97f96a776a70c3507d1f81482
SSDEEP 768:oVkPlVJCIPNWETtH4QJ1NLz9NZzZO12R1pbIq52h6K/G7YmW9AteB3bXg:TPRCMNWES4znZzZO4LpIq52kK/G7YmW0
TLSH
T113233A8FF2A900ECD1A6D17ECA974946E27778490B1287CF039056262F777D09D3FA62
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Cracked.exe

File Explorer

Cracked.exe

.exe 47KB

Cracked.exe

IMPHASH 7e4be00987f743bc27fc7dd0a9f84975
SHA256 d0e1c3a7ece331422feadc135278119dd582b695f21c8d95374b3851eed600e8
MD5 736ac0c2a96f48ab211a02dbc023e131
SHA1 aac741c7996b2f5fcba2bcf2a808ae8960c0e032
SHA512 c9cbf0b649dd87e5534de286d1b567080454facdba3ba09f1c2056ae8449f82470f6a70575f0e2018ab58966bec1a609f42ef7c97f96a776a70c3507d1f81482
SSDEEP 768:oVkPlVJCIPNWETtH4QJ1NLz9NZzZO12R1pbIq52h6K/G7YmW9AteB3bXg:TPRCMNWES4znZzZO4LpIq52kK/G7YmW0
TLSH
T113233A8FF2A900ECD1A6D17ECA974946E27778490B1287CF039056262F777D09D3FA62
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

28300

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\sypez\source\repos\VMPTest\x64\Release\VMPTest.pdb

msvcp140

?good@ios_base@std@@QEBA_NXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?_Syserror_map@std@@YAPEBDH@Z ?_Xlength_error@std@@YAXPEBD@Z ?_Winerror_map@std@@YAHH@Z ?_Xout_of_range@std@@YAXPEBD@Z ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?uncaught_exceptions@std@@YAHXZ

user32

MessageBoxA

kernel32

SleepConditionVariableSRW GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive WideCharToMultiByte MultiByteToWideChar GetFileInformationByHandleEx GetModuleHandleW IsDebuggerPresent VirtualProtect GetModuleHandleA LoadLibraryA GetProcAddress LocalFree FormatMessageA GetLocaleInfoEx CreateFileW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW AreFileApisANSI CloseHandle GetLastError InitializeSListHead

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memcpy __std_exception_destroy __std_exception_copy __std_terminate __current_exception __current_exception_context __C_specific_handler _CxxThrowException memset memmove

api-ms-win-crt-heap-l1-1-0

free malloc _callnewh _set_new_mode

api-ms-win-crt-runtime-l1-1-0

_initterm _initterm_e exit _exit abort __p___argc __p___argv terminate _c_exit _register_thread_local_exe_atexit_callback _initialize_narrow_environment _configure_narrow_argv _invalid_parameter_noinfo_noreturn _initialize_onexit_table _register_onexit_function _crt_atexit _set_app_type _cexit _seh_filter_exe _get_initial_narrow_environment

api-ms-win-crt-locale-l1-1-0

_configthreadlocale ___lc_codepage_func

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode