skeet.rar
- SHA256 58fcec982ad3a57ae69c97dc4c52ed012e7cfaf97918184af9e75aef62e846ee
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
skeet.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
skeet.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
steam.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
steam.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target skeet.rar
- Size 3.4MB
- Sample260819-dvnj7aware
- SHA256 58fcec982ad3a57ae69c97dc4c52ed012e7cfaf97918184af9e75aef62e846ee
- MD5 12fc41cea3bff6de80cb3d15e96d87e7
- SHA1 91a9e9856f7cc51a05ac0d0527a2db50dfcd9536
- SHA512 43b444e4b5b09c782bbb50c8f366d82e470e8d8c104db81d586f547131e98e4cca8649ebd23f269acb0c4d12acafc3ca2bad607541181c03e26f4cac7bd721eb
- SSDEEP 98304:y+6EQiiKuhK6m00ptxtqTTitRecU1ZjUW6+Fm4v:y+6EQimK6v0rxtWGaN6+Q8
- TLSH T11DF5334FBBA868EF64555AC97EF2D36041F0E56AF17546B8A16E410F3439C7B2803C8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack002/skeet.dll unpack002/steam.exe
File Explorer
-
skeet.rar.rar .zip 3.4MB
-
skeet crack (2025 fix).zip.zip 3.4MB
-
skeet.dll.dll 13.2MB
-
steam.exe.exe 23KB
skeet crack (2025 fix).zip
- SHA256 5d6aac68b7a3105c20e80e786e2d9e9dbf5ad6f86140c59ef14e23f71f7f01dd
- MD5 852639804e21d01499b392d25e7a8fd4
- SHA1 dbcf27ce7d0edf9116b52f2f303ca3cd368504ed
- SHA512 a45e67baeaab729ab547974bbbb53847751d793dbc507efa6c60b300731e5e922a867eb81469bccbf212c52bedf853ff38d94ebcc868c9b84364a48c02f4c4e7
- SSDEEP 98304:Z+6EQiiKuhK6m00ptxtqTTitRecU1ZjUW6+Fm4i:Z+6EQimK6v0rxtWGaN6+QD
- TLSH T18DF5334EBBA868FF64555AC97EF2D36041F0E56AF17546B8A16E410F3439C7B2803C8E
- MD5 SHA1 SHA512 SSDEEP TLSH
skeet.dll
- IMPHASH eaf67aba045dcfff7b1d28ae8bfc8b09
- SHA256 3268759be50dcfa99a93b3291abc32e63ffea130ed5ec4e6227948ea8f18e414
- MD5 e4f9e344fe53eb92a00248185d7bf8bc
- SHA1 2e41f345608210e9a089c3bb2f844a5e79f0c3ff
- SHA512 5ffd75c4ecc5e658c06465a8993599dfd6872bc83a07ccedf83f1ae84ef3f5aeafc4b418292794b33d1aae83c1209ee40baa7866e88c87f52abcd9a6f787b621
- SSDEEP 98304:jCu79c4+QkaExqurCZD5ckE40jzxwJA+Exzd7gjGJerIIQsY2e+w3dqip:ZfFkSnwzV+Epx6PY2ezE
- TLSH T173D6F633EB095C26E07DA2FDA45A2D09F496932744844DC7723D820FAFB358B694E47E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
1732621
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\ivank\source\repos\skeet\Release\skeet.pdb
kernel32
GetModuleHandleA
AllocConsole
SetConsoleTitleA
CreateThread
GetProcAddress
FindResourceW
LoadResource
LockResource
SizeofResource
VirtualAlloc
LoadLibraryA
AddVectoredExceptionHandler
SetThreadContext
ResumeThread
CloseHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
SetEnvironmentVariableW
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentThreadId
InitializeSListHead
ReleaseSRWLockExclusive
user32
MessageBoxA
FindWindowA
MessageBoxW
msvcp140
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?_Xlength_error@std@@YAXPBD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Throw_Cpp_error@std@@YAXH@Z
_Thrd_detach
?setf@ios_base@std@@QAEHHH@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xinvalid_argument@std@@YAXPBD@Z
?_Xbad_function_call@std@@YAXXZ
_Cnd_do_broadcast_at_thread_exit
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?width@ios_base@std@@QBE_JXZ
?flags@ios_base@std@@QBEHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?width@ios_base@std@@QAE_J_J@Z
?uncaught_exceptions@std@@YAHXZ
?good@ios_base@std@@QBE_NXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
vcruntime140
__current_exception_context
memset
__std_exception_copy
__std_exception_destroy
__CxxFrameHandler3
_CxxThrowException
_except_handler4_common
__std_type_info_destroy_list
memcpy
__current_exception
memmove
api-ms-win-crt-runtime-l1-1-0
_execute_onexit_table
_configure_narrow_argv
_initterm_e
_beginthreadex
_initterm
_cexit
_initialize_narrow_environment
_errno
_crt_atexit
_seh_filter_dll
terminate
_invalid_parameter_noinfo_noreturn
_register_onexit_function
_initialize_onexit_table
system
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf
__acrt_iob_func
freopen
api-ms-win-crt-heap-l1-1-0
malloc
_callnewh
free
api-ms-win-crt-convert-l1-1-0
strtoul
strtod
strtoull
strtoll
api-ms-win-crt-locale-l1-1-0
localeconv
api-ms-win-crt-math-l1-1-0
_dclass
Name
.text
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
57KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
537KB
Virtual Size
537KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
10.9MB
Virtual Size
10.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=34321,
count=10, id=260, version=34321,
count=20, id=261, version=34321,
count=4, id=257, version=34321,
count=5, id=257, version=33138,
count=111, id=1, productName=Unmarked objects,
count=3, id=265, version=34435,
count=1, id=255, version=34435,
count=1, id=151,
count=1, id=258, version=34435,
steam.exe
- IMPHASH 6dda173840fc586381b16d5f5fa9cfb1
- SHA256 aadd255a8efe2491b29c1d5917f72db3eea93ffde89995985a19d0d4c172213c
- MD5 afe9b68ed167f0ec45a28bd47d3054f7
- SHA1 bd07d119f7cc88573d864d68aa3d3612fcbbea9f
- SHA512 657c69fa4ddc7a609d22f7e0a10911103177197a56a69d3c9d9461d8e8db6ca732c315e4b1f1bbb0934b6dee29574e569a381b02e3c3f40b6e392eb7b1659349
- SSDEEP 384:A7nM/ItPc+pYsyKVzg6VvYxIP4Ztd6TTjuJtzwoF8BqbRZoXC6P+lK9vF907LaFy:psZWTJ2qaUR+XDP+lK9v47ya5z
- TLSH T1F4B23B337A168276D6A645B10839FFAA82BFA5305F7116D7FB818D2E0A705D1ED3240B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
13083
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Users\ivank\source\repos\skeet\Release\steam.pdb
kernel32
WriteProcessMemory
SetConsoleTitleA
WaitForSingleObject
GetModuleHandleA
OpenProcess
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
CloseHandle
GetProcAddress
VirtualAllocEx
CreateRemoteThread
GetCurrentDirectoryW
GetLastError
GetModuleHandleW
LocalFree
FormatMessageA
GetLocaleInfoEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
msvcp140
?uncaught_exceptions@std@@YAHXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Winerror_map@std@@YAHH@Z
?_Xlength_error@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?good@ios_base@std@@QBE_NXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
vcruntime140
memmove
__CxxFrameHandler3
__std_exception_destroy
__std_exception_copy
__std_terminate
_CxxThrowException
__current_exception
__current_exception_context
memset
memcpy
_except_handler4_common
api-ms-win-crt-heap-l1-1-0
malloc
_callnewh
free
_set_new_mode
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo_noreturn
terminate
_initialize_onexit_table
_register_thread_local_exe_atexit_callback
_register_onexit_function
_cexit
_controlfp_s
_exit
exit
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
_crt_atexit
_set_app_type
_seh_filter_exe
__p___argv
_c_exit
__p___argc
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
488B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=259, version=34321,
count=12, id=260, version=34321,
count=26, id=261, version=34321,
count=4, id=257, version=34321,
count=3, id=257, version=33138,
count=127, id=1, productName=Unmarked objects,
count=1, id=265, version=34435,
count=1, id=255, version=34435,
count=1, id=258, version=34435,