Neptune Spoofer - cracked by kai[.]exe

Resubmissions

18/08/2026, 14:11

260818-rhryqstdna8

18/08/2026, 14:11

260818-rhaz8atdlh3

Sharing

Copy URL Twitter E-mail

General

Target
Neptune Spoofer - cracked by kai.exe
Size 1.3MB
Sample260818-rhryqstdna
SHA256 cc3e851de57de38902f408f2b8c189030f4f08e1be3d650834c70e6cfac3fbcc
MD5 5a964b45f87623165b3bf410127f5114
SHA1 211bb23ad933fca5c925877ef92b5d331b5a7ab3
SHA512 548df642ff9051841b36d0904665c392012f457cc14a734322ca7247bc300135ac7ae3377086c8776a69382dc8171d69f7200b2da69a00ff2749c928faa75740
SSDEEP 24576:8MRr/0GKU7RzZxZUOgjlRaAFUl1aY+br6nOGWKHACRTEldOnwfSnTGCFgVz:M6OGWKn2ewanT
TLSH
T104558D0AF3AE45ADE2626538C5662303E5F9BC1617358FCB63904D62DF979C0EEB9700
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Neptune Spoofer - cracked by kai.exe

File Explorer

Neptune Spoofer - cracked by kai.exe

.exe 1.3MB

Neptune Spoofer - cracked by kai.exe

IMPHASH 64c59cc4a9354a507ae1c58441181e65
SHA256 cc3e851de57de38902f408f2b8c189030f4f08e1be3d650834c70e6cfac3fbcc
MD5 5a964b45f87623165b3bf410127f5114
SHA1 211bb23ad933fca5c925877ef92b5d331b5a7ab3
SHA512 548df642ff9051841b36d0904665c392012f457cc14a734322ca7247bc300135ac7ae3377086c8776a69382dc8171d69f7200b2da69a00ff2749c928faa75740
SSDEEP 24576:8MRr/0GKU7RzZxZUOgjlRaAFUl1aY+br6nOGWKHACRTEldOnwfSnTGCFgVz:M6OGWKn2ewanT
TLSH
T104558D0AF3AE45ADE2626538C5662303E5F9BC1617358FCB63904D62DF979C0EEB9700
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

758624

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\kaire\Documents\Default Project\Neptune Spoofer\examples\example_win32_directx11\Release_Cracked\Source.pdb

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_43

D3DCompile

ole32

CoInitialize CoUninitialize CoCreateInstance

kernel32

InitializeCriticalSectionEx DeleteCriticalSection GetModuleHandleW FormatMessageA EnterCriticalSection LeaveCriticalSection SleepEx GetSystemDirectoryA VerifyVersionInfoA MultiByteToWideChar MoveFileExA WaitForSingleObjectEx GetEnvironmentVariableA GetStdHandle GlobalAlloc GetFileType ReadFile PeekNamedPipe WaitForMultipleObjects GlobalFree CreateFileA GetFileSizeEx GlobalFindAtomA GetCurrentProcessId GetThreadContext VirtualProtectEx Process32First QueryPerformanceCounter FreeLibrary CreateThread GlobalLock ReleaseSRWLockExclusive AcquireSRWLockExclusive SleepConditionVariableSRW GetCurrentThreadId WideCharToMultiByte WakeAllConditionVariable SetUnhandledExceptionFilter GetStartupInfoW GetSystemTimeAsFileTime InitializeSListHead OutputDebugStringW DebugBreak GetTickCount VirtualFree GetSystemInfo LoadLibraryW CloseHandle Process32Next GetCurrentThread GetLastError GlobalAddAtomA Sleep CreateToolhelp32Snapshot OpenProcess ReleaseMutex WaitForSingleObject VirtualAlloc OutputDebugStringA GetCurrentProcess SetLastError WriteProcessMemory GlobalUnlock GetModuleHandleA LoadLibraryA QueryPerformanceFrequency GetProcAddress VerSetConditionMask CheckRemoteDebuggerPresent IsDebuggerPresent AllocConsole

user32

MoveWindow DestroyWindow SetWindowRgn CreateWindowExW GetSystemMetrics SetLayeredWindowAttributes TranslateMessage LoadIconA PeekMessageA PostQuitMessage FindWindowA UpdateWindow GetKeyState UnregisterClassW MessageBoxA GetActiveWindow ShowWindow GetWindowRect SetWindowLongA GetAsyncKeyState GetWindowLongA DefWindowProcA SetWindowDisplayAffinity SetClipboardData GetClipboardData EmptyClipboard RegisterClassExW CloseClipboard OpenClipboard GetCursorPos SetCursorPos ReleaseCapture IsWindowUnicode DispatchMessageA GetClientRect LoadCursorA ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetForegroundWindow SetCapture SetCursor

gdi32

CreateRoundRectRgn

advapi32

CryptAcquireContextA CryptGetHashParam CryptGenRandom CryptCreateHash CryptHashData CryptDestroyHash CryptDestroyKey CryptImportKey CryptEncrypt RegCloseKey RegSetValueExA RegOpenKeyExA CryptReleaseContext

vmprotectsdk64

VMProtectEnd VMProtectIsDebuggerPresent VMProtectBeginUltra

msvcp140

_Query_perf_frequency ?_Throw_Cpp_error@std@@YAXH@Z ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?uncaught_exception@std@@YA_NXZ ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Xlength_error@std@@YAXPEBD@Z _Cnd_do_broadcast_at_thread_exit _Query_perf_counter _Thrd_detach _Xtime_get_ticks ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z ?good@ios_base@std@@QEBA_NXZ

imm32

ImmReleaseContext ImmSetCandidateWindow ImmSetCompositionWindow ImmGetContext

dwmapi

DwmExtendFrameIntoClientArea

ntdll

RtlAdjustPrivilege NtRaiseHardError

normaliz

IdnToAscii

wldap32

ord143 ord217 ord46 ord211 ord45 ord50 ord41 ord22 ord26 ord27 ord32 ord33 ord35 ord79 ord30 ord200 ord301 ord60

crypt32

CertCloseStore CertEnumCertificatesInStore CertFindCertificateInStore CertFreeCertificateContext CryptStringToBinaryA PFXImportCertStore CryptDecodeObjectEx CertOpenStore CertFindExtension CertGetNameStringA CryptQueryObject CertCreateCertificateChainEngine CertFreeCertificateChainEngine CertGetCertificateChain CertFreeCertificateChain CertAddCertificateContextToStore

ws2_32

getsockopt ntohs getpeername connect bind WSAGetLastError send recv closesocket htons setsockopt socket WSASetLastError WSAIoctl WSAStartup WSACleanup accept htonl listen ioctlsocket __WSAFDIsSet select getaddrinfo recvfrom sendto gethostname ntohl getsockname freeaddrinfo

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception strrchr memset memmove memcpy memcmp wcsstr __C_specific_handler strchr strstr __std_terminate __std_exception_copy __std_exception_destroy __current_exception_context _CxxThrowException memchr

api-ms-win-crt-stdio-l1-1-0

__p__commode fputc fopen fputs _read feof _write _close _open _lseeki64 _set_fmode ftell __acrt_iob_func fflush __stdio_common_vsscanf fread fgets __stdio_common_vsprintf _wfopen fwrite __stdio_common_vfprintf fseek fclose

api-ms-win-crt-utility-l1-1-0

rand qsort

api-ms-win-crt-heap-l1-1-0

_set_new_mode malloc free realloc calloc _callnewh

api-ms-win-crt-runtime-l1-1-0

_wassert _get_narrow_winmain_command_line _configure_narrow_argv _getpid exit _initterm_e _initialize_onexit_table system terminate _initterm _register_onexit_function _invalid_parameter_noinfo_noreturn _c_exit _set_app_type _exit __sys_nerr _errno strerror _crt_atexit _cexit _beginthreadex _seh_filter_exe _register_thread_local_exe_atexit_callback _initialize_narrow_environment

api-ms-win-crt-string-l1-1-0

strcspn strspn isupper strcmp strpbrk tolower _strdup strncpy strlen strncmp

api-ms-win-crt-convert-l1-1-0

strtoul strtoll atoi strtol

api-ms-win-crt-multibyte-l1-1-0

_mbsicmp

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-math-l1-1-0

acosf sinf sqrtf cosf ceilf fmodf powf __setusermatherr

api-ms-win-crt-time-l1-1-0

_gmtime64 _time64

api-ms-win-crt-filesystem-l1-1-0

_unlink _fstat64 _access _stat64