Static task
static1
Behavioral task
behavioral1
Sample
mra.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
mra.exe
Resource
win10v2004-20231025-en
General
-
Target
mra.exe
-
Size
2.1MB
-
MD5
b796a7c7592a953b7a641a40f972cd88
-
SHA1
434aaae06d5e9390c2d7af7f532202b818621cd9
-
SHA256
0c9b7cbcda623b897752b43fa30ada640371a495eb78e52bacf9e864290f74ac
-
SHA512
300b4030750c508e581c7e2e7ea8970a10aaac9baf3bb76f7eaf37db9317db1245a62a6e7d1d110324c4256808a3d6cb8c24b824db24bc4423e00bec8816c271
-
SSDEEP
49152:9R9q+FwQWXekAEOUE8+6htaMYj01fF/jWULtH32UZfKMlrg09lGvIZY601GS8bYe:9R9fSTdcixzBd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource mra.exe
Files
-
mra.exe.exe windows:4 windows x86
95aed3462011df0aae604ac95264e0b3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
Imports
kernel32
AddAtomA
CloseHandle
CreateMutexA
CreateThread
ExitProcess
FindAtomA
GetAtomNameA
GetLastError
InterlockedIncrement
ReleaseMutex
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualAlloc
VirtualFree
WaitForSingleObject
msvcrt
_fdopen
_fileno
_isatty
_strdup
_write
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_ctype
_errno
_fileno
_iob
_isctype
_onexit
_pctype
_setmode
_vsnprintf
abort
atan2
atexit
atoi
cos
fclose
fflush
floor
fopen
fprintf
fread
free
frexp
fseek
ftell
fwrite
getc
getenv
ldexp
localeconv
log10
malloc
memchr
memcpy
memmove
memset
realloc
setlocale
setvbuf
signal
sin
sqrt
strcat
strchr
strcmp
strcoll
strcpy
strftime
strlen
strncpy
strtod
strtol
strtoul
strxfrm
ungetc
user32
GetMessageA
winmm
mciGetErrorStringA
waveInAddBuffer
waveInClose
waveInOpen
waveInPrepareHeader
waveInReset
waveInStart
waveInUnprepareHeader
waveOutClose
waveOutOpen
waveOutPrepareHeader
waveOutReset
waveOutUnprepareHeader
waveOutWrite
fftw3
ord119
ord104
ord149
ord124
ord106
Sections
.text Size: 242KB - Virtual size: 241KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 18KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.stab Size: 148KB - Virtual size: 148KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.stabstr Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ