AccountExploit_Cracked-0[.]2[.]0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
AccountExploit_Cracked-0.2.0.exe
Size 14.0MB
Sample260828-cv347sstd1
SHA256 80d2e07529cd4034f9349a69e957359aae9e839a4991e6806f4962833e45204f
MD5 9deea02329b0f03425b61617a9d37a16
SHA1 1365957a28d53a05b6709fef5ca8d9691cada338
SHA512 21b6ad3135d0e3d7de64f3690c97479088b235021aa980e3d6640823f58154d2932aa0d817f23a3dc360e7953192346e2010e5dfaa57d82153117af34470b128
SSDEEP 98304:Tu90+XKqbzfai1xSCg7/e54wjDpYURD5ZLxl+HahZ+HQduErr7:yh60OISCgK54qDfD5p+HahZ+HQdLrr
TLSH
T10CE65B07E96549D9C0EED234C96692267B70BC444B3123D72FA0F6292F77BD06EB9390
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AccountExploit_Cracked-0.2.0.exe

File Explorer

AccountExploit_Cracked-0.2.0.exe

.exe 14.0MB

AccountExploit_Cracked-0.2.0.exe

IMPHASH 1a2910063b6b6188f6e6dce33024b5ab
SHA256 80d2e07529cd4034f9349a69e957359aae9e839a4991e6806f4962833e45204f
MD5 9deea02329b0f03425b61617a9d37a16
SHA1 1365957a28d53a05b6709fef5ca8d9691cada338
SHA512 21b6ad3135d0e3d7de64f3690c97479088b235021aa980e3d6640823f58154d2932aa0d817f23a3dc360e7953192346e2010e5dfaa57d82153117af34470b128
SSDEEP 98304:Tu90+XKqbzfai1xSCg7/e54wjDpYURD5ZLxl+HahZ+HQduErr7:yh60OISCgK54qDfD5p+HahZ+HQdLrr
TLSH
T10CE65B07E96549D9C0EED234C96692267B70BC444B3123D72FA0F6292F77BD06EB9390
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5184

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

AddVectoredExceptionHandler CheckRemoteDebuggerPresent CloseHandle CreateFileMappingA CreateFileW CreateProcessW CreateToolhelp32Snapshot DeleteFileW DuplicateHandle FormatMessageW FreeLibrary GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentThread GetCurrentThreadId GetEnvironmentVariableW GetExitCodeProcess GetFileInformationByHandle GetFileInformationByHandleEx GetFullPathNameW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetProcAddress GetProcessHeap GetStdHandle GetTempPathW GetThreadContext HeapAlloc HeapFree HeapReAlloc InitOnceBeginInitialize InitOnceComplete IsDebuggerPresent LoadLibraryA MapViewOfFile Module32FirstW Module32NextW MultiByteToWideChar OutputDebugStringW ReadProcessMemory ResumeThread RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetLastError SetThreadContext SetThreadStackGuarantee SetUnhandledExceptionFilter Sleep TlsAlloc TlsFree TlsGetValue TlsSetValue UnmapViewOfFile VirtualAllocEx WaitForSingleObject WriteConsoleW WriteFile WriteProcessMemory DeleteCriticalSection EnterCriticalSection InitializeCriticalSection LeaveCriticalSection RaiseException RtlUnwindEx VirtualProtect VirtualQuery __C_specific_handler

ntdll

NtWriteFile RtlNtStatusToDosError

shell32

ShellExecuteW

user32

MessageBoxW

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

api-ms-win-crt-environment-l1-1-0

__p__environ

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc free malloc

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-private-l1-1-0

memcmp memcpy memmove

api-ms-win-crt-runtime-l1-1-0

_set_app_type __p___argc __p___argv _cexit _configure_narrow_argv _crt_atexit _exit _fpreset _initialize_narrow_environment _initterm _initterm_e _set_invalid_parameter_handler abort exit signal

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf fflush setvbuf

api-ms-win-crt-string-l1-1-0

memset strlen strncmp

Name

.text

Size

240KB

Virtual Size

239KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

13.7MB

Virtual Size

13.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

576B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1024B

Virtual Size

676B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

AccountExploit_Cracked-0.2.0.exe

kernel32

ntdll

shell32

user32

api-ms-win-core-synch-l1-2-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

generic