cricket[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
cricket.exe
Size 755KB
Sample260804-twa89asvcx
SHA256 405a3d98d9a2fdab5608cdc16578e288f2034f574412de1d74baa650dbee4304
MD5 0f941a9fefdfc3e70e24f12b6f2d8d96
SHA1 ba7328613ee50bfda537015ca961ec069edc3430
SHA512 af636f33752022abf6da22c642ef8e55bebb9b73ae24ebf54ea3b15bbdf01346edb3ff52f1534ce4517b0e61c19071c809c7b77e6144159ea2cc60b0af1f0efc
SSDEEP 12288:n0/zSknQPmbFlXTPhvHA7azeJZbGeoEP7d/p1uHc4/2:NqbFR9A7aCZbxo20z2
TLSH
T1AFF4AE1DADE7A9F0F9E93430624B1AB8A6351949842B72E77634F95B2C33010A5173FF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cricket.exe

File Explorer

cricket.exe

.exe 755KB

cricket.exe

IMPHASH d20a9e341245699775e8760818473a10
SHA256 405a3d98d9a2fdab5608cdc16578e288f2034f574412de1d74baa650dbee4304
MD5 0f941a9fefdfc3e70e24f12b6f2d8d96
SHA1 ba7328613ee50bfda537015ca961ec069edc3430
SHA512 af636f33752022abf6da22c642ef8e55bebb9b73ae24ebf54ea3b15bbdf01346edb3ff52f1534ce4517b0e61c19071c809c7b77e6144159ea2cc60b0af1f0efc
SSDEEP 12288:n0/zSknQPmbFlXTPhvHA7azeJZbGeoEP7d/p1uHc4/2:NqbFR9A7aCZbxo20z2
TLSH
T1AFF4AE1DADE7A9F0F9E93430624B1AB8A6351949842B72E77634F95B2C33010A5173FF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

54192

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadFile GlobalAlloc GetProcAddress LoadLibraryA SetErrorMode InitializeCriticalSection SystemTimeToFileTime GetSystemTime GetTimeZoneInformation IsDBCSLeadByte GetACP GetCPInfo Sleep WaitForMultipleObjects CreateThread ExitThread WinExec CopyFileA WriteFile SetEndOfFile DeleteFileA GetVersionExA CreateFileA GetFileSize SetFilePointer CloseHandle GlobalUnlock GlobalLock GetModuleFileNameA GetCommandLineA GetModuleHandleA ExitProcess lstrlenA GetStartupInfoA CreateProcessA EnterCriticalSection GlobalFree LeaveCriticalSection DeleteCriticalSection QueryPerformanceCounter

user32

SetTimer GetFocus SetCapture ReleaseCapture SetCursor EndPaint BeginPaint MessageBoxA DeleteMenu ClientToScreen TrackPopupMenu GetCapture GetCursorPos WindowFromPoint ScreenToClient MapVirtualKeyA CheckMenuItem InvalidateRect PostMessageA GetDlgItemTextA EnableWindow SetDlgItemTextA SetFocus GetClientRect GetMenu SetMenu GetDesktopWindow MoveWindow DialogBoxParamA FillRect KillTimer EnableMenuItem PostQuitMessage LoadMenuA ShowWindow UpdateWindow LoadIconA LoadCursorA RegisterClassA LoadAcceleratorsA GetMessageA TranslateMessage DispatchMessageA TranslateAcceleratorA GetWindow GetWindowRect SetWindowPos GetWindowLongA DefWindowProcA IsWindow DestroyWindow CreateWindowExA SetWindowLongA DdeInitializeA DdeCreateStringHandleA DdeConnect DdeClientTransaction DdeDisconnect DdeFreeStringHandle DdeUninitialize GetKeyState EmptyClipboard SetClipboardData EndDialog GetSubMenu LoadStringA OpenClipboard GetClipboardData CloseClipboard GetDC ReleaseDC GetWindowTextLengthA GetDlgItem DestroyMenu

gdi32

SetPolyFillMode StrokePath ExtCreatePen DeleteObject SelectObject StretchDIBits SetDIBitsToDevice GdiFlush CreateCompatibleBitmap DeleteDC CreateDIBSection GetDeviceCaps EndPath CreateCompatibleDC BitBlt EnumFontFamiliesA ExtTextOutA SetBkColor GetBkColor SetTextAlign SetBkMode SetTextColor SelectClipRgn LineTo MoveToEx CreatePen GetTextExtentPoint32A GetTextMetricsA GetTextAlign GetBkMode GetTextColor IntersectClipRect GetClipRgn CreateRectRgn CreateFontIndirectA DPtoLP GetObjectA RealizePalette StartDocA LPtoDP StartPage EndPage EndDoc BeginPath CreatePalette SelectPalette GetSystemPaletteEntries FillPath SelectClipPath PolyBezierTo GetClipBox SaveDC RestoreDC CreateSolidBrush

comdlg32

GetSaveFileNameA GetOpenFileNameA PrintDlgA

advapi32

RegSetValueA RegCreateKeyA RegQueryValueExA RegCloseKey RegQueryValueA RegOpenKeyExA RegSetValueExA

shell32

DragQueryFileA DragAcceptFiles

winmm

timeKillEvent timeSetEvent waveOutReset timeEndPeriod timeGetTime timeBeginPeriod timeGetDevCaps waveOutGetDevCapsA waveOutClose waveOutWrite waveOutPrepareHeader waveOutUnprepareHeader waveOutOpen