SENSECRACKBYSXTANINT3[.]exe

General

Target
SENSECRACKBYSXTANINT3.exe
Size 147KB
Sample260809-vjnt9ascph
SHA256 f83d40a08bf1af486f19eb346b6d77c26442f027a04847595ca4e51a466cef79
MD5 4291801e3a46076f7976784c0295db4a
SHA1 f6fcc903e2011c700a2aeab33d1f7ae7ce0d47a8
SHA512 d02c50a7ed322c60ed9ab8390adf4ead624f5a1da252e872ed163a5ddc1c283cae1590185eb025efffaa49a01138e0eb5bf4d8486a7c98734d91a22073bf6666
SSDEEP 3072:v1wMV+oDA2ZyMyRu7ILu8o5xvmOtD52bJ:4IAD0ILLOm4a
TLSH
T106E37D5B73A130F9E1B38238C9650A46E772783617609BDF03A447762F276D09E3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SENSECRACKBYSXTANINT3.exe

File Explorer

SENSECRACKBYSXTANINT3.exe

.exe 147KB

SENSECRACKBYSXTANINT3.exe

IMPHASH 05d7d8a9cae71ec99b9d7630a3c5bcfc
SHA256 f83d40a08bf1af486f19eb346b6d77c26442f027a04847595ca4e51a466cef79
MD5 4291801e3a46076f7976784c0295db4a
SHA1 f6fcc903e2011c700a2aeab33d1f7ae7ce0d47a8
SHA512 d02c50a7ed322c60ed9ab8390adf4ead624f5a1da252e872ed163a5ddc1c283cae1590185eb025efffaa49a01138e0eb5bf4d8486a7c98734d91a22073bf6666
SSDEEP 3072:v1wMV+oDA2ZyMyRu7ILu8o5xvmOtD52bJ:4IAD0ILLOm4a
TLSH
T106E37D5B73A130F9E1B38238C9650A46E772783617609BDF03A447762F276D09E3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

9952

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

GetUserNameA RegCloseKey RegCreateKeyExA RegOpenKeyExA RegQueryValueExA RegSetValueExA CryptAcquireContextA CryptReleaseContext CryptDeriveKey CryptDestroyKey CryptSetKeyParam CryptSetHashParam CryptGetHashParam CryptGenRandom CryptImportKey CryptEncrypt CryptCreateHash CryptHashData CryptDestroyHash

kernel32

GetEnvironmentVariableA CreateDirectoryA CreateFileA SetFileAttributesA WriteFile GetVolumeInformationA CloseHandle GetLastError GetComputerNameA WriteConsoleW CreateFileW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwindEx SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetStdHandle GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect CompareStringW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx HeapSize HeapReAlloc

user32

MessageBoxA

Name

.text

Size

91KB

Virtual Size

90KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

44KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

SENSECRACKBYSXTANINT3.exe

advapi32

kernel32

user32

generic