stellaware cracked by kae034444[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
stellaware cracked by kae034444.exe
Size 965KB
Sample260809-jvycaatdkh
SHA256 828840ed3e9d2f79b246b7e3feb32ac08bf14749c670347147fec1cb4135076e
MD5 b00eea17120053c89c2ce83381e09ea2
SHA1 7388a297fd3fb74ab436750e09510ab7114829f7
SHA512 cade4b9ed8b619d5507cc9b22570f04e0add4bccd372a8a70e3e1c6aa622945d65a219ab82c9464e7bf7c504c182ee9fc3543e7c8dae0ebd6f633722cf279e8d
SSDEEP 24576:Fbw0aPHiYPCZ2GHof3k0GZJfsxwMNXiwYMijnhSbL:S0a/sof3dbywYpjnE
TLSH
T1C625BF1AA2A401FCD0B6D0F8DA97A917E6323889033059CF17E059562F67BF46B7FB11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
stellaware cracked by kae034444.exe

File Explorer

stellaware cracked by kae034444.exe

.exe 965KB

stellaware cracked by kae034444.exe

IMPHASH b3c5f9f7e62b2af674ad48d898c3abd0
SHA256 828840ed3e9d2f79b246b7e3feb32ac08bf14749c670347147fec1cb4135076e
MD5 b00eea17120053c89c2ce83381e09ea2
SHA1 7388a297fd3fb74ab436750e09510ab7114829f7
SHA512 cade4b9ed8b619d5507cc9b22570f04e0add4bccd372a8a70e3e1c6aa622945d65a219ab82c9464e7bf7c504c182ee9fc3543e7c8dae0ebd6f633722cf279e8d
SSDEEP 24576:Fbw0aPHiYPCZ2GHof3k0GZJfsxwMNXiwYMijnhSbL:S0a/sof3dbywYpjnE
TLSH
T1C625BF1AA2A401FCD0B6D0F8DA97A917E6323889033059CF17E059562F67BF46B7FB11
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

765296

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_47

D3DCompile

user32

TranslateMessage DispatchMessageW PeekMessageW GetMonitorInfoW MonitorFromWindow LoadImageW GetWindowThreadProcessId SetWindowLongPtrW GetWindowLongPtrW ScreenToClient GetWindowRect GetClientRect SetForegroundWindow GetForegroundWindow UpdateWindow GetSystemMetrics KillTimer GetRawInputData RegisterRawInputDevices SendInput MapVirtualKeyW ShowWindow MessageBoxW IsWindowVisible IsIconic BringWindowToTop GetAsyncKeyState MsgWaitForMultipleObjects SetTimer PostMessageW AttachThreadInput DefWindowProcW PostQuitMessage RegisterClassExW CreateWindowExW UnregisterClassW MessageBoxA SetLayeredWindowAttributes DrawTextW BeginPaint EndPaint InvalidateRect FillRect OpenClipboard CloseClipboard SetClipboardData GetClipboardData SetProcessDpiAwarenessContext SetWindowPos DestroyWindow EmptyClipboard LoadCursorW ClientToScreen GetCursorPos SetCursor SetCursorPos IsWindowUnicode ReleaseCapture SetCapture GetCapture GetKeyState GetMessageExtraInfo TrackMouseEvent GetKeyboardLayout

gdi32

SetTextColor SetBkMode SelectObject GetStockObject DeleteObject CreateSolidBrush CreateFontW

shell32

ShellExecuteW SHGetFolderPathW

winhttp

WinHttpSetTimeouts WinHttpCloseHandle WinHttpConnect WinHttpOpenRequest WinHttpSendRequest WinHttpReceiveResponse WinHttpReadData WinHttpQueryHeaders WinHttpAddRequestHeaders WinHttpOpen WinHttpQueryDataAvailable

wlanapi

WlanFreeMemory WlanQueryInterface WlanEnumInterfaces WlanCloseHandle WlanOpenHandle

bcrypt

BCryptOpenAlgorithmProvider BCryptCloseAlgorithmProvider BCryptCreateHash BCryptHashData BCryptFinishHash BCryptDestroyHash BCryptGenRandom

ws2_32

closesocket ioctlsocket bind htonl WSACleanup htons recvfrom sendto setsockopt socket WSAStartup accept shutdown send select recv listen

mfplat

MFShutdown

advapi32

OpenProcessToken GetTokenInformation StartTraceW ControlTraceW EnableTraceEx2 OpenTraceW ProcessTrace CloseTrace RegCloseKey RegOpenKeyExA RegQueryValueExA

tdh

TdhGetProperty

kernel32

FindNextFileW FindFirstFileExW FindFirstFileW FindClose GetFileAttributesW GetLocaleInfoEx FormatMessageA LocalFree GetFileAttributesExW GetFileInformationByHandle CreateDirectoryW GetFileInformationByHandleEx GetLocaleInfoA GetProcAddress ReleaseSRWLockExclusive QueryPerformanceFrequency QueryPerformanceCounter GlobalFree GlobalLock GlobalAlloc GetComputerNameA GetVolumeInformationA SetFileAttributesW UnmapViewOfFile MapViewOfFile OpenFileMappingW GetCurrentProcessId GetLastError GetEnvironmentVariableW Process32NextW Process32FirstW CreateToolhelp32Snapshot WideCharToMultiByte MultiByteToWideChar SetFileInformationByHandle GetTempPathW CreateFile2 AreFileApisANSI GetModuleHandleW LoadLibraryA CopyFile2 GetModuleFileNameW GetTickCount64 GetCurrentThreadId TerminateProcess Sleep Beep GetCurrentProcess CloseHandle AcquireSRWLockExclusive InitializeSListHead SleepConditionVariableSRW WakeAllConditionVariable SetUnhandledExceptionFilter GetStartupInfoW GlobalUnlock GetSystemTimeAsFileTime FreeLibrary

ole32

CoInitializeEx CoCreateInstance CoUninitialize

msvcp140

?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?width@ios_base@std@@QEAA_J_J@Z ?width@ios_base@std@@QEBA_JXZ ?flags@ios_base@std@@QEBAHXZ ?good@ios_base@std@@QEBA_NXZ ?rdstate@ios_base@std@@QEBAHXZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ??Bios_base@std@@QEBA_NXZ ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?always_noconv@codecvt_base@std@@QEBA_NXZ ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?uncaught_exceptions@std@@YAHXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ??7ios_base@std@@QEBA_NXZ ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ ?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??1_Lockit@std@@QEAA@XZ ??0_Lockit@std@@QEAA@H@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z ?_Xbad_function_call@std@@YAXXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?_Id_cnt@id@locale@std@@0HA ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A _Xtime_get_ticks ?_Xinvalid_argument@std@@YAXPEBD@Z ?_Random_device@std@@YAIXZ ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?_Winerror_map@std@@YAHH@Z ?_Syserror_map@std@@YAPEBDH@Z ?_Throw_Cpp_error@std@@YAXH@Z _Cnd_do_broadcast_at_thread_exit _Mtx_unlock ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ?_Xbad_alloc@std@@YAXXZ ?_Xlength_error@std@@YAXPEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z _Query_perf_counter _Query_perf_frequency _Thrd_detach _Thrd_join _Thrd_id _Mtx_lock

winmm

timeEndPeriod timeBeginPeriod

imm32

ImmGetContext ImmSetCompositionWindow ImmSetCandidateWindow ImmReleaseContext

vcruntime140

__std_exception_destroy __current_exception_context __current_exception strchr strstr memset memcmp memchr __C_specific_handler __std_terminate memmove memcpy _CxxThrowException __std_exception_copy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-heap-l1-1-0

_set_new_mode malloc free _callnewh

api-ms-win-crt-string-l1-1-0

strncpy_s strcmp strncpy isspace strlen isalnum wcscpy_s strncmp tolower wcslen

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf __stdio_common_vfprintf ungetc __stdio_common_vswprintf_s _get_stream_buffer_pointers fclose fflush fgetc __acrt_iob_func _wfopen _set_fmode fgetpos __stdio_common_vsprintf setvbuf fwrite __p__commode _fseeki64 ftell fputc fseek fread fsetpos

api-ms-win-crt-runtime-l1-1-0

_errno terminate _c_exit _register_thread_local_exe_atexit_callback _beginthreadex _exit exit _initterm_e _initterm _get_wide_winmain_command_line _initialize_wide_environment _configure_wide_argv _set_app_type _seh_filter_exe abort _cexit _initialize_onexit_table _register_onexit_function _crt_atexit

api-ms-win-crt-math-l1-1-0

__setusermatherr _dsign ceilf expf cosf sinf sqrtf fmodf floorf acosf

api-ms-win-crt-convert-l1-1-0

strtof atoi strtoull strtod strtoll strtol

api-ms-win-crt-filesystem-l1-1-0

_unlock_file _lock_file

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func _configthreadlocale localeconv

api-ms-win-crt-time-l1-1-0

_gmtime64_s

api-ms-win-crt-utility-l1-1-0

qsort