Musalut
Static task
static1
Behavioral task
behavioral1
Sample
e25023cd2e8d72f0a657f91a97fb5ce0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
e25023cd2e8d72f0a657f91a97fb5ce0N.exe
Resource
win10v2004-20240802-en
General
-
Target
e25023cd2e8d72f0a657f91a97fb5ce0N.exe
-
Size
33KB
-
MD5
e25023cd2e8d72f0a657f91a97fb5ce0
-
SHA1
1d012e2273e02416b527bb6382fcf7a1bc88c047
-
SHA256
7db879833cbc47026d641b4a8501ca8b3c1aad9d4e4d0aa5d4e3abc756d51c24
-
SHA512
9d605dfa0df70b7c0512cb0e7f1589adbd583ee1553a72cd708e654478c953201284e9c19fb6de59dd3def110906b4100bbc6007c478717aab24de10491a977d
-
SSDEEP
384:azJRHqetjPmsycQEDZi6sb8KMlJLRif7AAHwNJK0WRY7uAHYpXSQ:/94ZQb8KMlJLRwQNwYxHeSQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e25023cd2e8d72f0a657f91a97fb5ce0N.exe
Files
-
e25023cd2e8d72f0a657f91a97fb5ce0N.exe.exe windows:4 windows x86 arch:x86
6b039641c94d12716eb7a094a119bc1b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
mfc42
ord5714
msvcrt
atoi
user32
DrawIcon
advapi32
OpenProcessToken
shell32
ShellExecuteA
Exports
Exports
Sections
.MPRESS1 Size: 21KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE