exynteria_cracked.zip
- SHA256 27ccdbb8fc4aee595db6d337bb2e9ca13a7cb98c0b447c08bbdb81543c7f0fdc
General
- Target exynteria_cracked.zip
- Size 44.8MB
- Sample261003-wse45swtat
- SHA256 27ccdbb8fc4aee595db6d337bb2e9ca13a7cb98c0b447c08bbdb81543c7f0fdc
- MD5 8065eaf3c0fb835cfb1004de5f454df0
- SHA1 86ba5e90d056909585ca8253ac60c9b3a6bcb588
- SHA512 1aafa8370963c508b6096835eb292c04b79e504f369d0e3aab25146f439c2238962b1d9f9a7cc950ccfa705321ab20534181da64a41ecea0ceb2a6acd80ea622
- SSDEEP 786432:mG4yiCGqpWjCrP2kjneMOWRDXusx45BiPIBJlldGeNcTVhsfolsyLsURXhNK:V4hCGIWBkZOsxiBPtld0hsAlsygOTK
- TLSH T1F7A733D6AD1B9DEAE521907A904D03EEC22C43D620FF16E4BF73EED90464582592DCBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Detects Pyinstaller 1 IoCs
resource yara_rule static1/unpack001/exynteria_cracked/resources/exy_server.exe pyinstaller - Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack001/exynteria_cracked/exynteria.exe unpack001/exynteria_cracked/loader.exe unpack001/exynteria_cracked/patcher.dll unpack001/exynteria_cracked/resources/exy_server.exe
File Explorer
-
exynteria_cracked.zip.zip 44.8MB
-
exynteria_cracked/exynteria.exe.exe 37.8MB
-
exynteria_cracked/loader.exe.exe 18KB
-
exynteria_cracked/patcher.dll.dll 62KB
-
exynteria_cracked/resources/exy_server.exe.exe 20.4MB
-
exy_server.pyc4KB
-
exynteria_cracked/resources/responses/result_001.bin7KB
-
exynteria_cracked/resources/responses/result_002.bin548B
-
exynteria_cracked/resources/responses/result_003.bin275KB
-
exynteria_cracked/resources/responses/result_004.bin1KB
exynteria_cracked/exynteria.exe
- IMPHASH 8ca183441c45db9e329682d9948033e8
- SHA256 e44462f0fe58597ea1b74ebfdfa79dcceccee323a7d518a0df7567d25847a8cd
- MD5 ee8622cb76fde92f59959fa2fe20085d
- SHA1 e9902ce7269a11ab6713f808934ba8420fddb93d
- SHA512 6ad6c726f0bb69666a973754a9e685a38ef7b193a3a9e198517a078cb7054ddd071b12e1e6c21f9e47178c71e3a82c75bddcac90f6303c891de576d53675480b
- SSDEEP 393216:Z71Xkpj8L+u9agtzsJrg0hkA+TD0mbvyzmLWsBM0hkA+TD0mbnytozk3yYK:Z71Xs5g0hLqomEmLdBM0hLqomoD3d
- TLSH T11297E0C9758551BCC589C534C28A1BE7E45834CA4F7968EBBFC185222E30AE8DE76F34
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
39759872
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
AcquireSRWLockExclusive
shell32
SHCreateDirectoryExW
ole32
CoTaskMemFree
user32
CallNextHookEx
advapi32
CreateProcessAsUserW
d3d11
D3D11CreateDeviceAndSwapChain
crypt32
CertAddCertificateContextToStore
winmm
PlaySoundA
imm32
ImmGetContext
d3dcompiler_47
D3DCompile
dwmapi
DwmExtendFrameIntoClientArea
bcrypt
BCryptCloseAlgorithmProvider
dbghelp
MiniDumpWriteDump
ws2_32
WSACleanup
iphlpapi
if_nametoindex
secur32
InitSecurityInterfaceW
Name
.text
Size
5.5MB
Virtual Size
5.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
776KB
Virtual Size
972KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
268KB
Virtual Size
267KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.0sO
Size
15.2MB
Virtual Size
15.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.Y\~
Size
512B
Virtual Size
312B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.Xp7
Size
14.5MB
Virtual Size
14.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
463B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ptext
Size
124KB
Virtual Size
123KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
exynteria_cracked/loader.exe
- IMPHASH ed1f112462772ec154151958f3822aff
- SHA256 e254ec549475a9b3c2925694aa505ab1ed2e850969ccefa1e1e84f18f9159c5c
- MD5 749b30fc7fae855ec57e8a556cfa21f1
- SHA1 c8c2eb918b0b54773ae497bf2528e916207e7009
- SHA512 7e57257faa05f63c319bbceb8fc5a482a26c7de0ae5e929f3cee81bcea4639106031d43498d9f3fb671aa5e57264c58313e3d87974e66f69d403376cd664f6d7
- SSDEEP 384:4cl+XKpbv3s8V9AtjLUu/dgpsG8wIgxRDUVNDYSnIMvRzb:/xPy9QigpsSRDUVNrRz
- TLSH T1748219477BC349FAE43592BA45B39924D2B2F507472297CF6390452E0FAA6D0BC33B49
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
7704
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Clancy\Desktop\scalux_2026\ConsoleApplication1\x64\Release\ConsoleApplication1.pdb
kernel32
WriteProcessMemory
WaitForSingleObject
ResumeThread
GetLastError
CloseHandle
GetProcAddress
VirtualAllocEx
CreateProcessW
GetModuleHandleW
CreateRemoteThread
VirtualFreeEx
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlCaptureContext
msvcp140
?good@ios_base@std@@QEBA_NXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z
?uncaught_exceptions@std@@YAHXZ
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?wcerr@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?_Xlength_error@std@@YAXPEBD@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__current_exception_context
_CxxThrowException
__C_specific_handler
__std_terminate
__std_exception_copy
__std_exception_destroy
memcpy
memset
__current_exception
api-ms-win-crt-heap-l1-1-0
free
_callnewh
malloc
_set_new_mode
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_c_exit
_register_thread_local_exe_atexit_callback
_exit
_cexit
exit
_initterm_e
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
__p___wargv
__p___argc
_invalid_parameter_noinfo_noreturn
terminate
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
600B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=259, version=34321,
count=10, id=260, version=34321,
count=25, id=261, version=34321,
count=6, id=257, version=34321,
count=3, id=257, version=30795,
count=95, id=1, productName=Unmarked objects,
count=1, id=265, version=34435,
count=1, id=255, version=34435,
count=1, id=258, version=34435,
exynteria_cracked/patcher.dll
- IMPHASH 4277931f047404338b8e144ee1a993a2
- SHA256 6868668a50d8383f66c160f3f6a1d6240fc9820ba9671882f72a34bdbd1e4f55
- MD5 d03194eef2a24119864413033df58955
- SHA1 b77937a76fb65ebaa22bea18faf75c81c5036bf8
- SHA512 a5b5a5c74cd7a5b1bb5f9e0110833f3bca6228c7cf1c89bb8b19e7dbdfb77abcad9617808b248aae4af6ad05b16adc37dfd572d23a71c259239427a06adf9463
- SSDEEP 768:07WrKFWfQSzy3WvZ58VhApEYIlV8cO1lBknTJROTqS5OIgYMYrv8E:07aLymB58VhApENV7ABknTrVIFTv
- TLSH T144534B1ADD2A506FD369CD78C9430C52EE63BC868794A7CFB7914DDA0E21BD09B3D602
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
31660
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Clancy\Desktop\exynteria_v7\exynteria_hook\x64\Release\exynteria_hook.pdb
kernel32
SuspendThread
ResumeThread
GetProcAddress
GetModuleHandleW
FlushInstructionCache
DisableThreadLibraryCalls
CloseHandle
CreateThread
LocalFree
VirtualFree
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapCreate
HeapFree
Thread32Next
Thread32First
GetCurrentThreadId
CreateToolhelp32Snapshot
Sleep
HeapReAlloc
HeapAlloc
GetThreadContext
GetCurrentProcessId
SetThreadContext
OpenThread
WriteProcessMemory
VirtualAllocEx
CreateRemoteThread
QueryFullProcessImageNameW
VirtualFreeEx
AllocConsole
SetConsoleTitleW
GetLocaleInfoEx
IsDebuggerPresent
GetCurrentProcess
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileW
GetFileAttributesExW
GetLastError
GetFileInformationByHandleEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
FormatMessageA
VirtualProtect
InitializeSListHead
shell32
SHGetFolderPathW
msvcp140
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?good@ios_base@std@@QEBA_NXZ
??7ios_base@std@@QEBA_NXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Syserror_map@std@@YAPEBDH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Winerror_map@std@@YAHH@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Id_cnt@id@locale@std@@0HA
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?_Xbad_alloc@std@@YAXXZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
crypt32
CryptProtectData
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_type_info_destroy_list
_CxxThrowException
__C_specific_handler
__std_terminate
memcpy
memmove
memset
__std_exception_copy
__std_exception_destroy
api-ms-win-crt-heap-l1-1-0
free
_callnewh
malloc
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfprintf
fputc
fflush
fclose
fgetc
fwrite
fgetpos
setvbuf
ungetc
fsetpos
fread
_fseeki64
_get_stream_buffer_pointers
freopen_s
__acrt_iob_func
api-ms-win-crt-runtime-l1-1-0
_cexit
_initterm_e
abort
_initterm
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_invoke_watson
_configure_narrow_argv
_crt_atexit
_seh_filter_dll
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
api-ms-win-crt-string-l1-1-0
strcmp
Name
.text
Size
31KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
248B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
216B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=259, version=35207,
count=8, id=260, version=35207,
count=22, id=261, version=35207,
count=6, id=257, version=35207,
count=7, id=257, version=33145,
count=204, id=1, productName=Unmarked objects,
count=8, id=265, version=35228,
count=1, id=255, version=35228,
count=1, id=258, version=35228,
exynteria_cracked/resources/exy_server.exe
- IMPHASH 351592d5ead6df0859b0cc0056827c95
- SHA256 b8344e27d829c63f07e01d773958c79caf64105779399247d6f566db2724f873
- MD5 584173bd851ff9483ed571c78f9bccbb
- SHA1 35b8f31f1f9c2836a7c64291ef7588003ed94596
- SHA512 002828533cb5c00e161a6bb142aafa896129434175f73ee26ecaaee1ce0090d1c58c4b73c295b50402cb23d8b72f1ba9952f82e1686c086ef57e79f87aa4707d
- SSDEEP 393216:WRddhcD63hucF/dQJlkzokwF3MnG3LVQgJjgSUV9cRZMIapo5DP/swnHvpZz:WBSm3hrFdQWQ3MGbegBkqMIbXs4PpZ
- TLSH T1AB2733E57F6508EFE0EA903E95E3E1199A2179C79BE1D82707E01E132A476D06C3F718
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Pyinstaller
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
53040
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
TranslateMessage
ShutdownBlockReasonCreate
GetWindowThreadProcessId
SetWindowLongPtrW
GetWindowLongPtrW
MsgWaitForMultipleObjects
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassW
DefWindowProcW
PeekMessageW
DispatchMessageW
GetMessageW
kernel32
GetTimeZoneInformation
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetStringTypeW
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryExW
FormatMessageW
GetModuleFileNameW
SetDllDirectoryW
CreateSymbolicLinkW
SetErrorMode
CreateDirectoryW
GetCommandLineW
GetEnvironmentVariableW
ExpandEnvironmentStringsW
DeleteFileW
FindClose
HeapSize
FindNextFileW
GetDriveTypeW
RemoveDirectoryW
GetTempPathW
CloseHandle
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
Sleep
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
LocalFree
SetConsoleCtrlHandler
GetConsoleWindow
K32EnumProcessModules
K32GetModuleFileNameExW
CreateFileW
FindFirstFileExW
GetFinalPathNameByHandleW
MultiByteToWideChar
WideCharToMultiByte
GetFileAttributesExW
HeapReAlloc
WriteConsoleW
SetEndOfFile
FindFirstFileW
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
RtlPcToFileHeader
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ReadFile
GetFullPathNameW
SetStdHandle
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
GetCommandLineA
HeapFree
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
GetCurrentDirectoryW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
VirtualProtect
CompareStringW
LCMapStringW
FlushFileBuffers
SetEnvironmentVariableW
advapi32
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
Name
.text
Size
180KB
Virtual Size
180KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
78KB
Virtual Size
77KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
60KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=182, id=261, version=33140,
count=12, id=260, version=33140,
count=10, id=259, version=33140,
count=3, id=253, version=35207,
count=9, id=259, version=35207,
count=17, id=260, version=35207,
count=40, id=261, version=35207,
count=7, id=257, version=33140,
count=141, id=1, productName=Unmarked objects,
count=27, id=260, version=35215,
count=1, id=258, version=35215,
exy_server.pyc
- SHA256 1463ea16934380041e6119c0e7782f47be123f992294e649fcaefdadc0c57e22
- MD5 dcb5a7633768a5d9f6768cd9a3440d9e
- SHA1 d0f8e27e6e4dc7147ef5c5800fabca6645a0e1d8
- SHA512 b41a23bf182fd0db36f4bc3343e18c6275903d09e5bcde3988973974ab4bb5da1542e1670282b2a90ace600c2bbf956afc0fae97562401ca2a50dca1ded2fc04
- SSDEEP 96:2UcIOMXTftXysuDizX2hiwEUXehXIynzhJVQ:2UcI9JmYwELhRi
- TLSH T1D69133C7B982D8B7FDE4F3B9550906B7B32B65E597148303A51AC017FE86B026C6A0DC
- MD5 SHA1 SHA512 SSDEEP TLSH
exynteria_cracked/resources/responses/result_001.bin
- SHA256 b2c77edc50383878f75183e4fb2af4aa5ebe86750a0b6f770073aefb478a6d1d
- MD5 8f06f9aad01333d0c3e67077c388e41f
- SHA1 7a0202f9882ece251c89289b3d4f389830ee0f72
- SHA512 0a6469f95bd5e86dff6ba4fcfb6d218d7acfe4d6d6cb6d15f875c9eab2b576386cc91ffebaa1ebff49eb65bac0b7625b337c98c2117f1869c3e323ee0abbccb2
- SSDEEP 192:/8Poha7FOoMrnGfuDLtJO0CLhXTXWM8XMubkk:WXTX2Xb
- TLSH T186F169FEEE260AC52A42B4A1ACB9E86B52701441576271DCBFCDC33C2FA50FE57801E4
- MD5 SHA1 SHA512 SSDEEP TLSH
exynteria_cracked/resources/responses/result_002.bin
- SHA256 d2d7acfcaace750f608e76001a11ed9b1238b2365c8da7b6065fca90386f9102
- MD5 f57f59499b0ad53072aa654f39ab947b
- SHA1 bd931c119f04c3a919dc1887ae534be94f1bab03
- SHA512 d101bb99fd205e4c75c9b8a48224244c6604704d4ebc9ff5dca233ecefebb12d144aa163ff72c5a14c5fc2d567396046e6fa10b0b40b1ac39936a003d32abd50
- TLSH T1AAF020D7D2977473620B5173A49971E94CD3C45824C409F9078E2856E98E8CCEBEF912
- MD5 SHA1 SHA512 TLSH
exynteria_cracked/resources/responses/result_003.bin
- SHA256 2cedd855df0db5e338a8c0653d9b348c3581d47fa9c1228658b4f974d6b5925f
- MD5 9e63e4aa277292ae75d341c5739e7ef8
- SHA1 23ea2a99f5b8a8fcda9644c33488787f3c5a2906
- SHA512 ca4b266482bd80c1a9d32ffb84c16a419ee8d2a51fc15384bed0935a899968bf07314b16fb55a659ef1d8384a01c9ca37e4023b012c84b0a57ae6aa8447e113e
- SSDEEP 6144:SRIrEhoktg+NIk7Z+PmZrfxSTnjipUCjAjqG:amEeIgIIk70mdMbjipUCjAjqG
- TLSH T149543AA23A7EC5BE04C8B949723519DEDEFD0B2C25A84CF51B8F1647F091F2C4E8A549
- MD5 SHA1 SHA512 SSDEEP TLSH
exynteria_cracked/resources/responses/result_004.bin
- SHA256 62fe2901a6faa4e7576ae9b458b147c0ca05d9b97f7c01db62824f70f0a5ef3d
- MD5 3a4e5012c6a91df7a4cd3e92ff3a7103
- SHA1 94bcc74f2530bd591735f42407153eaa40a3a439
- SHA512 0de5e417925f61f06b90995c8b2cc13e213863a29d2f799e826a8ff0591cf72ccfae578190d01af96757fe6f428c757689cf8a5fb0e284534f3ee361e1cac29f
- TLSH T1CE311CD30B0021EC99C5E2098B6A3AB57F8E45C032E847294F499B0E11FC8DC7FD568B
- MD5 SHA1 SHA512 TLSH