cracked by PAGE_FAULT_IN_NON_PAGED_AREA[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
cracked by PAGE_FAULT_IN_NON_PAGED_AREA.zip
Size 963KB
Sample260809-yzfqcscc79
SHA256 ff5609a61e6e5e61877b6b06de4d0563e417eda4b800a9d0c5e8f77c5fbd3257
MD5 03bdacbb99d50cd1dd0aabe517c72811
SHA1 b304cb8511ef3a97d76b563361c956e65290a96a
SHA512 2c1d0aeb17b2a6229fbe7fab329f1cdc61264b19e591b5ed2c25690f71107ad9daf7bd95cb43b254720b0d0f145b085a30ab6e6211564689ac15ca3e3ff58caf
SSDEEP 24576:lmuVAsDKZniA6BEdUMzC4S1Fvxma+Us36uqIPdIxyk+8M/:lmuVTDKZniA6wfAxmzUE6mLkRM/
TLSH
T1722523A9E4D04C1F24135C70B8FFA66268EF4C79D5885F586F6F67BA2790CAC701CA12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/cracked by yuh boy trenjamin button/vital temp.exe

File Explorer

cracked by PAGE_FAULT_IN_NON_PAGED_AREA.zip

.zip 963KB
cracked by yuh boy trenjamin button/vital temp.exe

.exe 1.8MB

cracked by PAGE_FAULT_IN_NON_PAGED_AREA.zip

SHA256 ff5609a61e6e5e61877b6b06de4d0563e417eda4b800a9d0c5e8f77c5fbd3257
MD5 03bdacbb99d50cd1dd0aabe517c72811
SHA1 b304cb8511ef3a97d76b563361c956e65290a96a
SHA512 2c1d0aeb17b2a6229fbe7fab329f1cdc61264b19e591b5ed2c25690f71107ad9daf7bd95cb43b254720b0d0f145b085a30ab6e6211564689ac15ca3e3ff58caf
SSDEEP 24576:lmuVAsDKZniA6BEdUMzC4S1Fvxma+Us36uqIPdIxyk+8M/:lmuVTDKZniA6wfAxmzUE6mLkRM/
TLSH
T1722523A9E4D04C1F24135C70B8FFA66268EF4C79D5885F586F6F67BA2790CAC701CA12
MD5 SHA1 SHA512 SSDEEP TLSH

cracked by yuh boy trenjamin button/vital temp.exe

IMPHASH 9422bae837aef6fb7725b8fd39640b16
SHA256 0eb8c9045b095dcacfd994eb7aa68ed09947000635c95e0032e1de244d52584e
MD5 ea0678f3c4e056556236106467006295
SHA1 d8ebf58651cd2371694554496a152019e27ab206
SHA512 492898ffc17a5e4b87e3ec75292726770e181d7e1b2aa4e6a2bcab66ac62902de4a7b1df89b196089319a67a24a34e269c86995959ec046a20e728da324ac75f
SSDEEP 24576:+ngpxDyvi7qlA9h+u3PF2DchGiZfT0bcqZqy8Ufm850UbHhEu1Muml1r:+ngHDyvimZu3wDc50hMyNbHjm
TLSH
T1FD95BE07F355829DC927593886A2C797B375BC502B14D7CB31A97E29AF831F01ABB2D0
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

741068

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\RAT\Desktop\Sources\Reported Spoofer SRC\build\Xylo temp.pdb

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_47

D3DCompile

dwmapi

DwmExtendFrameIntoClientArea DwmSetWindowAttribute

kernel32

GetProcAddress FreeLibrary GetModuleHandleW VirtualProtect SetPriorityClass GetCurrentProcess TerminateProcess SetProcessShutdownParameters GetCurrentDirectoryA GetModuleHandleA OpenProcess CreateToolhelp32Snapshot Process32NextW Process32FirstW CloseHandle WideCharToMultiByte AllocConsole VirtualQuery IsDebuggerPresent CheckRemoteDebuggerPresent MultiByteToWideChar GlobalAlloc GlobalFree GlobalLock GlobalUnlock ReadFile LoadLibraryA InitializeSListHead QueryPerformanceCounter GetFileSizeEx MapViewOfFile UnmapViewOfFile CreateFileMappingA ReleaseSRWLockExclusive AcquireSRWLockExclusive SleepConditionVariableSRW Sleep GetCurrentThreadId WakeAllConditionVariable RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent GetStartupInfoW GetCurrentProcessId GetSystemTimeAsFileTime LoadLibraryW HeapFree QueryPerformanceFrequency HeapAlloc CreateFileA GetLocaleInfoA

user32

GetWindowRect GetKeyState GetMessageExtraInfo ScreenToClient MoveWindow ClientToScreen TrackMouseEvent GetKeyboardLayout LoadCursorW SetCapture SetCursor GetClientRect GetCapture IsWindowUnicode ReleaseCapture SetCursorPos GetCursorPos UpdateWindow PostQuitMessage TranslateMessage SetLayeredWindowAttributes PeekMessageW SetWindowLongA DispatchMessageW ShowWindow RegisterClassExW UnregisterClassW GetSystemMetrics CreateWindowExW DestroyWindow DefWindowProcW GetWindowLongW GetForegroundWindow MessageBoxA SetClipboardData GetClipboardData EmptyClipboard CloseClipboard OpenClipboard

shell32

ShellExecuteA

msvcp140

?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??7ios_base@std@@QEBA_NXZ ?always_noconv@codecvt_base@std@@QEBA_NXZ ?good@ios_base@std@@QEBA_NXZ ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?_Xbad_alloc@std@@YAXXZ ?_Xlength_error@std@@YAXPEBD@Z _Query_perf_frequency ??1_Lockit@std@@QEAA@XZ ??0_Lockit@std@@QEAA@H@Z ?_Throw_Cpp_error@std@@YAXH@Z ?uncaught_exceptions@std@@YAHXZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?_Id_cnt@id@locale@std@@0HA ?_Xout_of_range@std@@YAXPEBD@Z ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?_Random_device@std@@YAIXZ _Mtx_lock _Cnd_do_broadcast_at_thread_exit _Query_perf_counter _Thrd_detach _Mtx_unlock ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z

imm32

ImmSetCandidateWindow ImmReleaseContext ImmGetContext ImmSetCompositionWindow

vcruntime140_1

__CxxFrameHandler4

vcruntime140

strstr memcpy _CxxThrowException __intrinsic_setjmp __current_exception_context __current_exception __C_specific_handler memcmp memchr memset memmove __std_exception_copy longjmp strrchr __std_exception_destroy __std_terminate

api-ms-win-crt-heap-l1-1-0

free _set_new_mode malloc _callnewh

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _crt_atexit _cexit _seh_filter_exe _set_app_type exit _get_narrow_winmain_command_line _initterm _initterm_e _exit system _c_exit _register_thread_local_exe_atexit_callback _beginthreadex _invoke_watson terminate

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf fputc __stdio_common_vsscanf _set_fmode _wfopen __acrt_iob_func _pclose fseek fclose ftell __stdio_common_vfprintf _get_stream_buffer_pointers fgetc fread __p__commode fsetpos ungetc _popen _fseeki64 setvbuf fgetpos fwrite fgets fflush

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-string-l1-1-0

strncpy tolower strncmp strcpy_s strcmp

api-ms-win-crt-filesystem-l1-1-0

_lock_file _unlock_file

api-ms-win-crt-convert-l1-1-0

strtol

api-ms-win-crt-math-l1-1-0

fmodf cosf sinf __setusermatherr ceilf acosf sqrtf powf

api-ms-win-crt-locale-l1-1-0

_configthreadlocale