home

crackme.exe

The executable crackme.exe has been detected as malware by 4 anti-virus scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from dc306.4shared.com.
MD5:
66f573036f8b99863d75743eff84f15d

SHA-1:
5470e76fffe91a100bf83f6a6bca0737918400cf

SHA-256:
0c7cdfdb6d4c8876e9c5bae906fcf1cbf174f019ef45d518954885856501a0be

Scanner detections:
4 / 68

Status:
Malware

Analysis date:
11/17/2024 4:28:21 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Spy.17245
7.11.160.182

NANO AntiVirus
Trojan.Win32.PePatch.cysian
0.28.0.60698

Norman
Agent.AKSZR
11.20140716

Rising Antivirus
PE:Trojan.Win32.Generic.154CED46!357363014
23.00.65.14714

File size:
12 KB (12,288 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
10/8/1975 9:18:49 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
192:nv6Nvl8MsMjB6fl464kfu9AWaLNezxea0Xqi8HWTdOTWapQZja:v6MMl6KjkfUGYz0a0XqNWhOTWapQZ

Entry address:
0x1000

Entry point:
6A, 00, E8, FF, 04, 00, 00, A3, CA, 20, 40, 00, 6A, 00, 68, F4, 20, 40, 00, E8, A6, 04, 00, 00, 0B, C0, 74, 01, C3, C7, 05, 64, 20, 40, 00, 03, 40, 00, 00, C7, 05, 68, 20, 40, 00, 28, 11, 40, 00, C7, 05, 6C, 20, 40, 00, 00, 00, 00, 00, C7, 05, 70, 20, 40, 00, 00, 00, 00, 00, A1, CA, 20, 40, 00, A3, 74, 20, 40, 00, 6A, 64, 50, E8, D1, 03, 00, 00, A3, 78, 20, 40, 00, 68, 00, 7F, 00, 00, 6A, 00, E8, A2, 03, 00, 00, A3, 7C, 20, 40, 00, C7, 05, 80, 20, 40, 00, 05, 00, 00, 00, C7, 05, 84, 20, 40, 00, 10, 21, 40...
 
[+]

Packer / compiler:
TASM / MASM

Code size:
1.5 KB (1,536 bytes)

The file crackme.exe has been seen being distributed by the following URL.

http://dc306.4shared.com/download/.../CRACKME.EXE

Remove crackme.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.