Crackme.zip
- SHA256 07ae9709141687e122f94427a38d9a12848fe6278d96bad5bafd93e65ce85f51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Loader.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Loader.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target Crackme.zip
- Size 13KB
- Sample260804-fbjs1av1bs
- SHA256 07ae9709141687e122f94427a38d9a12848fe6278d96bad5bafd93e65ce85f51
- MD5 6278748bb151e1d8fb881a4488dcf2da
- SHA1 5f25c8ff8c017c4c60927febe114922642c8ccfe
- SHA512 7bf992f2dabf6d4c26f17e6999350d26aaf24af9073c75205e98072e214f589b6ee8068772607b89fc75ac9f95a1b9ce4564b206bb8638db35cc13332ecd3b9f
- SSDEEP 384:9Ozjr0D0uLDEvJhmgiG5Q2KB3yvT01w6y+IOlF:9Aj9DvJhPeBivTGMa
- TLSH T15B52BE7A0727A547E60D2AF873652D2C20EE7063F768CC9327B16E751662397B7483C1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Crackme.dll unpack001/Loader.exe
File Explorer
-
Crackme.zip.zip 13KB
-
Crackme.dll.dll 17KB
-
Loader.exe.exe 12KB
Crackme.dll
- IMPHASH 3e105856f2b74335c65b60a3753d81b8
- SHA256 013d85a32d6ce6a8dc0c464c2c9f4854501da69f870e62deba8a43d6e73d1b2a
- MD5 2c23a7acf4b41a381f19e108af9d635c
- SHA1 ca29918863d33464b115868eeaee166399a131fa
- SHA512 a07f18151512acf3cda96a1f9c60a3c3927aea04619c878a4e227a5d61e459b7ab0aa8b4eef0b7627883722ece7084259de2e5fc55f0c515af57a8d6d70822cf
- SSDEEP 192:jIUdTYhP8n+EzMuXSuy4SuKTHZfpGJSYhUBxuz3+EO1vixiAsAVGwcIImEo:jIAEhEn+EYIKTHRwEBMz3NOke6Im
- TLSH T1C6725B43FB4248F8D12A837644574E09E276BA902751E3CF43A1652E0EA73D17A7EF52
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
8348
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\dim4i\source\repos\CrackMeDLL1\x64\Release\CrackMeDLL1.pdb
msvcp140
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?_Xlength_error@std@@YAXPEBD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?uncaught_exception@std@@YA_NXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?good@ios_base@std@@QEBA_NXZ
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memmove
_CxxThrowException
__C_specific_handler
__std_exception_destroy
__std_exception_copy
__std_terminate
memcpy
memset
__std_type_info_destroy_list
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_execute_onexit_table
_configure_narrow_argv
_seh_filter_dll
_initterm
_cexit
exit
_invalid_parameter_noinfo_noreturn
_initialize_narrow_environment
_initterm_e
api-ms-win-crt-heap-l1-1-0
malloc
free
_callnewh
kernel32
RtlCaptureContext
InitializeSListHead
IsDebuggerPresent
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
GetSystemTimeAsFileTime
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
720B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
248B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
80B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=17, id=261, version=33030,
count=8, id=260, version=33030,
count=3, id=259, version=33030,
count=7, id=257, version=33030,
count=2, id=257, version=30795,
count=60, id=1, productName=Unmarked objects,
count=2, id=265, version=33145,
count=1, id=255, version=33145,
count=1, id=258, version=33145,
Loader.exe
- IMPHASH 5fce948a6a0fac415a701da81a1df4be
- SHA256 5e249ddbe4cd454e852d4c669a35893dfacd63642df436f1a015ba947a62a967
- MD5 de36babde35f566f87976ff1329e461b
- SHA1 020c19b459fcacaaaf25cbd471b31d30bc07e706
- SHA512 f9189241ed8a165260c090664a5a859b323301f1fae946e44cdcd9676e522ef3169a08d304522841fa2ab84011ce0994ed901af193456f94f19620a6e8bccff0
- SSDEEP 192:o899oK5FqFqFGelCHepUU1LeDkJphdQSmriAsAVi3Q5tfMcSB:d9oK5FiqFGtHwUMLIgp93vB
- TLSH T109422A0BFB8248FED56DC2B4C0AB0A0EE4767A11875253CB43BA45361EF12D0B235BD9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
5376
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\dim4i\source\repos\TestFirstDllLoader\x64\Release\TestFirstDllLoader.pdb
kernel32
Sleep
LoadLibraryA
FreeLibrary
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlCaptureContext
GetModuleHandleW
msvcp140
?good@ios_base@std@@QEBA_NXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__current_exception_context
__current_exception
memcpy
__std_terminate
__C_specific_handler
memset
api-ms-win-crt-runtime-l1-1-0
terminate
_register_onexit_function
_crt_atexit
_initialize_onexit_table
_register_thread_local_exe_atexit_callback
_cexit
__p___argv
__p___argc
_exit
exit
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
_c_exit
_set_app_type
_seh_filter_exe
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
512B
Virtual Size
408B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
48B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=18, id=261, version=33030,
count=10, id=260, version=33030,
count=3, id=259, version=33030,
count=6, id=257, version=33030,
count=3, id=257, version=30795,
count=67, id=1, productName=Unmarked objects,
count=1, id=265, version=33145,
count=1, id=255, version=33145,
count=1, id=258, version=33145,