CrackTap[.]exe | Triage™

Resubmissions

23/09/2026, 19:23

260923-x35yzsst9j

23/09/2026, 19:18

260923-xz94jaaf983

Sharing

Copy URL Twitter E-mail

General

Target
CrackTap.exe
Size 20.7MB
Sample260923-x35yzsst9j
SHA256 cf146efe7b5efec9634e9be323c2a457f6dbf0bd2be3d5f45e29ccd971ce764c
MD5 891b44af4a8558a55652848c3199203f
SHA1 1a07c7919b679e8e6bcd7e30a8d073c5fd84fcae
SHA512 4fcf9c3155608d72bc0e755d812381c24ba5f7a00fc2dd2d453dbb94649ba5dffbe1f118328f3ea1bad50a8896c06ed5f7c28d612a0ddb1562e89821621a5fd8
SSDEEP 393216:VWR2qaVi46F2II9sLQqEJwtMRFC+zIsWMqZqfEqLKFfvGmfp9Vkm50/KCJxSB:oKjcI+CRF6ZqYFmqkmIK6SB
TLSH
T17927234B739452E8D02BC5748527BF0BF27274090F7886EB77D51A84AFB7AC05A7A702
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CrackTap.exe

File Explorer

CrackTap.exe

.exe 20.7MB

CrackTap.exe

IMPHASH 888ef3c614a9404c16de7fb3fd405caa
SHA256 cf146efe7b5efec9634e9be323c2a457f6dbf0bd2be3d5f45e29ccd971ce764c
MD5 891b44af4a8558a55652848c3199203f
SHA1 1a07c7919b679e8e6bcd7e30a8d073c5fd84fcae
SHA512 4fcf9c3155608d72bc0e755d812381c24ba5f7a00fc2dd2d453dbb94649ba5dffbe1f118328f3ea1bad50a8896c06ed5f7c28d612a0ddb1562e89821621a5fd8
SSDEEP 393216:VWR2qaVi46F2II9sLQqEJwtMRFC+zIsWMqZqfEqLKFfvGmfp9Vkm50/KCJxSB:oKjcI+CRF6ZqYFmqkmIK6SB
TLSH
T17927234B739452E8D02BC5748527BF0BF27274090F7886EB77D51A84AFB7AC05A7A702
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

950272

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ole32

CoInitialize CoCreateInstance CoInitializeEx CoUninitialize

shlwapi

SHDeleteKeyW

winhttp

WinHttpQueryDataAvailable WinHttpCrackUrl WinHttpConnect WinHttpSetTimeouts WinHttpSendRequest WinHttpOpenRequest WinHttpCloseHandle WinHttpReadData WinHttpQueryHeaders WinHttpOpen WinHttpReceiveResponse

crypt32

CryptUnprotectData CryptProtectData

bcrypt

BCryptCreateHash BCryptHashData BCryptDestroyHash BCryptCloseAlgorithmProvider BCryptFinishHash BCryptSetProperty BCryptGetProperty BCryptDestroyKey BCryptGenerateSymmetricKey BCryptDecrypt BCryptOpenAlgorithmProvider

kernel32

GetProcAddress VerSetConditionMask FreeLibrary QueryPerformanceCounter OutputDebugStringA GlobalAlloc GlobalFree GlobalLock WideCharToMultiByte GlobalUnlock SizeofResource GetVolumeInformationW GetCurrentProcess TerminateProcess InitializeCriticalSectionEx OpenProcess CreateToolhelp32Snapshot Sleep GetLastError Process32NextW GetCurrentThread LockResource Process32FirstW CloseHandle LoadResource FindResourceW DecodePointer GetThreadContext DeleteCriticalSection GetComputerNameW GetCurrentProcessId SystemTimeToFileTime CreateProcessW GetModuleHandleW QueryFullProcessImageNameW GetSystemTimeAsFileTime GetTickCount SetConsoleTitleW IsDebuggerPresent CheckRemoteDebuggerPresent IsWow64Process ExitProcess ReadFile CreateFileW GetFileAttributesW GetFileAttributesA GetModuleFileNameW GetEnvironmentVariableW LocalFree ReadProcessMemory AllocConsole Wow64DisableWow64FsRedirection Wow64RevertWow64FsRedirection EnterCriticalSection LeaveCriticalSection InitializeCriticalSection ResumeThread Thread32Next Thread32First GetCurrentThreadId GetNativeSystemInfo CreateActCtxW WriteFile GetTempPathW UnmapViewOfFile DeleteFileW GetTempFileNameW CreateFileMappingW ReleaseActCtx MapViewOfFile ActivateActCtx GetSystemDirectoryW DeactivateActCtx GetSystemWow64DirectoryW Module32FirstW GetCurrentDirectoryW GetWindowsDirectoryW WaitForSingleObject DuplicateHandle ResetEvent DeviceIoControl IsDBCSLeadByte TerminateThread CreateThread GetExitCodeThread WriteProcessMemory VirtualProtectEx VirtualAllocEx CreateRemoteThread VirtualFreeEx SetThreadContext VirtualQueryEx SuspendThread GetThreadTimes OpenThread GetSystemInfo LoadLibraryW GetCommandLineA GetStdHandle GetModuleHandleExW FreeLibraryAndExitThread ExitThread FlsFree FlsSetValue FlsGetValue FlsAlloc SetLastError RtlPcToFileHeader RtlCaptureContext RtlUnwindEx RtlLookupFunctionEntry RaiseException OutputDebugStringW GetCPInfo LCMapStringEx EncodePointer GetStringTypeW WaitForSingleObjectEx GetFileInformationByHandleEx AreFileApisANSI CreateFile2 SetFileInformationByHandle GetFileAttributesExW FindNextFileW FindFirstFileExW FindFirstFileW FindClose CreateDirectoryW GetLocaleInfoEx HeapFree QueryPerformanceFrequency LoadLibraryA MultiByteToWideChar GetLocaleInfoA GetModuleHandleA VirtualProtect LoadLibraryExW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetConsoleOutputCP GetFileSizeEx HeapReAlloc IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap GetCommandLineW IsProcessorFeaturePresent FormatMessageA GetStartupInfoW SetUnhandledExceptionFilter InitializeSListHead SleepConditionVariableSRW HeapAlloc GetFileType ReadConsoleW GetConsoleMode SetFilePointerEx HeapSize WriteConsoleW SetEndOfFile CreateNamedPipeW RtlUnwind UnhandledExceptionFilter RtlVirtualUnwind ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable

user32

GetWindowRect IsWindowVisible SetWindowLongPtrW GetWindowLongPtrW IsWindow GetMonitorInfoW EnumWindows UpdateLayeredWindow MessageBoxW DestroyWindow SetWindowPos GetDpiForWindow SetActiveWindow CreateWindowExW GetSystemMetrics RegisterClassExW ShowWindow DispatchMessageW PeekMessageW TranslateMessage PostQuitMessage UpdateWindow GetWindowThreadProcessId LoadImageW UnregisterClassW OpenClipboard CloseClipboard EmptyClipboard GetClipboardData SetClipboardData DefWindowProcW GetKeyState GetMessageExtraInfo GetDC MonitorFromWindow ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetForegroundWindow LoadCursorW SetCapture SetCursor GetClientRect SetProcessDPIAware IsWindowUnicode ReleaseCapture SetCursorPos ReleaseDC GetCursorPos wsprintfW MonitorFromPoint SetForegroundWindow GetKeyboardLayout

gdi32

GetDeviceCaps DeleteDC DeleteObject CreateCompatibleDC SelectObject CreateDIBSection

advapi32

GetUserNameA RegQueryValueExW RegOpenKeyExW OpenProcessToken RegCloseKey LookupPrivilegeValueW AdjustTokenPrivileges OpenThreadToken RegSetValueExW RegCreateKeyW ConvertStringSecurityDescriptorToSecurityDescriptorW RegOpenKeyW RegEnumValueW CryptAcquireContextW GetTokenInformation CryptCreateHash CryptHashData CryptDestroyHash CryptReleaseContext CryptGetHashParam

shell32

ShellExecuteExW ShellExecuteW ShellExecuteA

oleaut32

SysFreeString

dwmapi

DwmSetWindowAttribute

imm32

ImmSetCompositionWindow ImmReleaseContext ImmGetContext ImmSetCandidateWindow

d3d9

Direct3DCreate9

Name

.text

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

274KB

Virtual Size

273KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

10KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

42KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vmp0

Size

2.8MB

Virtual Size

2.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

16.5MB

Virtual Size

16.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

CrackTap.exe

ole32

shlwapi

winhttp

crypt32

bcrypt

kernel32

user32

gdi32

advapi32

shell32

oleaut32

dwmapi

imm32

d3d9

generic