Static task
static1
Behavioral task
behavioral1
Sample
xfer records serum keygen torrent.exe
Resource
win7-20240903-es
General
-
Target
xfer records serum keygen torrent.7z
-
Size
22.7MB
-
MD5
4a49b5291305b9160344a5ed279bb679
-
SHA1
d1eb4e6bce9d7b2bfe4a2fd167c75e77035af0fb
-
SHA256
ca42e240748cbe17fdb530ae2fab4a3d0a99c24f6449ee26aff359930a904bd8
-
SHA512
abffee03355a36c4ecce8822fa91f23cebb1e3fdf53fb533424265a3b48c0528d4cc2274d9f361e9a0647f55b4a31ed978248766cb742861e01449d5f2535811
-
SSDEEP
393216:M9w96OW7aourW2RxVdMmSOcrkDNRm4NU3EbSTk+HTr00HsfE8TPBHercDGuAhAFD:4C1q2RxDMmzJDvBNU3c0B76B+rcquAhK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/xfer records serum keygen torrent.exe
Files
-
xfer records serum keygen torrent.7z.7z
Password: 3080
-
xfer records serum keygen torrent.exe.exe windows:6 windows x86 arch:x86
Password: 3080
22fdff218e67136da776c02ad644f82a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
advapi32
CryptAcquireContextA
shell32
ShellExecuteA
oleaut32
VariantClear
crypt32
CertFreeCertificateChain
wldap32
ord45
normaliz
IdnToAscii
ws2_32
getsockopt
bcrypt
BCryptGenRandom
Sections
.text Size: - Virtual size: 711KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmpå]� Size: - Virtual size: 6.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmpå]� Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmpå]� Size: 8.4MB - Virtual size: 8.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ