Static task
static1
Behavioral task
behavioral1
Sample
QuickTime Pro 7.xx KeyGen - [MART!K]/Homepage.url
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
QuickTime Pro 7.xx KeyGen - [MART!K]/Homepage.url
Resource
win10v2004-20240221-en
Behavioral task
behavioral3
Sample
QuickTime Pro 7.xx KeyGen - [MART!K]/QuickTime Pro 7.xx KeyGen - [MART!K].exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
QuickTime Pro 7.xx KeyGen - [MART!K]/QuickTime Pro 7.xx KeyGen - [MART!K].exe
Resource
win10v2004-20240221-en
General
-
Target
a0d0bd8fda4609082869eebc31a452df
-
Size
118KB
-
MD5
a0d0bd8fda4609082869eebc31a452df
-
SHA1
2e5fa839b34e8364e9e1f71e1dbc200ab403f294
-
SHA256
ed7598726cffd8a5ef08d5c259d9b0c5e2c8db313b48c35d50bbeee76cd2e287
-
SHA512
5538982419b97ac82122fb2b4a9dec565b604eb296869a7bd2b9af2d039565fb87f9de20190db7eb9f6becbf8c2e333bf53500e5e45c700e4459ba393d63458e
-
SSDEEP
3072:lIwF2rKUGX1qcTqQxMiXrz2eoCMUOJhF5CjUxBTy1wx90:2wF+GX1qc+YzSVJhWjuyyL0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/QuickTime Pro 7.xx KeyGen - [MART!K]/QuickTime Pro 7.xx KeyGen - [MART!K].exe
Files
-
a0d0bd8fda4609082869eebc31a452df.rar
-
QuickTime Pro 7.xx KeyGen - [MART!K]/Homepage.url
-
QuickTime Pro 7.xx KeyGen - [MART!K]/MART!K.txt
-
QuickTime Pro 7.xx KeyGen - [MART!K]/QuickTime Pro 7.xx KeyGen - [MART!K].exe.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aht2 Size: 110KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE