CrackMeEasy[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
CrackMeEasy.exe
Size 18KB
Sample261003-scrw8a1djd
SHA256 afca12717fb5a1294b84215fbecdac2020d7e350cf0a7f75a356a61ce632799d
MD5 da56872e97eb7a0967063ebe7f28bcad
SHA1 a04e525f34c65c4d5de8378ec273473820bed8f2
SHA512 fc9d49c308a7527e7cd6c481512757c3a61a0c837289940b7a747c48b9804e2eaf8b81011e861ceb3f44ba148c6bca90d173d37e71ef51da5073aef516b96296
SSDEEP 384:VUhh7qyb1U48MsOCHGU3KRgCVI5xTorEYHg:VWZbq48pByVIMEYHg
TLSH
T1DB824B47BB9309FED065C37986834A21D272FD1A4722A7CF5362511E0FAA3C06CB7A45
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CrackMeEasy.exe

File Explorer

CrackMeEasy.exe

.exe 18KB

CrackMeEasy.exe

IMPHASH f8e09da968b79672cefca321270d33af
SHA256 afca12717fb5a1294b84215fbecdac2020d7e350cf0a7f75a356a61ce632799d
MD5 da56872e97eb7a0967063ebe7f28bcad
SHA1 a04e525f34c65c4d5de8378ec273473820bed8f2
SHA512 fc9d49c308a7527e7cd6c481512757c3a61a0c837289940b7a747c48b9804e2eaf8b81011e861ceb3f44ba148c6bca90d173d37e71ef51da5073aef516b96296
SSDEEP 384:VUhh7qyb1U48MsOCHGU3KRgCVI5xTorEYHg:VWZbq48pByVIMEYHg
TLSH
T1DB824B47BB9309FED065C37986834A21D272FD1A4722A7CF5362511E0FAA3C06CB7A45
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8488

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\kanax\source\repos\CrackMeEasy\x64\Release\CrackMeEasy.pdb

msvcp140

?_Xlength_error@std@@YAXPEBD@Z ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?id@?$ctype@D@std@@2V0locale@2@A ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?ignore@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ ?good@ios_base@std@@QEBA_NXZ ?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?_Xbad_alloc@std@@YAXXZ ?_Id_cnt@id@locale@std@@0HA ?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?uncaught_exceptions@std@@YAHXZ ??0_Lockit@std@@QEAA@H@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ??1_Lockit@std@@QEAA@XZ

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_exception_destroy __std_exception_copy __std_terminate __C_specific_handler memcpy memcmp __current_exception _CxxThrowException __current_exception_context

api-ms-win-crt-heap-l1-1-0

free malloc _callnewh _set_new_mode

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv _c_exit _exit exit _initterm_e _configure_narrow_argv terminate _initterm _initialize_narrow_environment _get_initial_narrow_environment _initialize_onexit_table _register_thread_local_exe_atexit_callback _set_app_type _seh_filter_exe _cexit _crt_atexit _register_onexit_function

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

kernel32

InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter GetModuleHandleW SetUnhandledExceptionFilter

api-ms-win-crt-string-l1-1-0

strlen