SonicAcademy_RSA_KeyGen[.]exe

Resubmissions

07/09/2026, 18:45

260907-xd1mzaen9x7

07/09/2026, 18:26

260907-w277aaaf497

Sharing

Copy URL Twitter E-mail

General

Target
SonicAcademy_RSA_KeyGen.exe
Size 1.2MB
Sample260907-w277aaaf49
SHA256 515d4a527b61dbf18d67cd236f84ba37e6325601b0099c7e23f3f44525a58b26
MD5 d8843a38b6012deeca8faf61fe2a4477
SHA1 a45f0b047a860795a0ae0b1eb2fde0a18f359524
SHA512 536d20eab3c4ea763f31b71e00cffd4a9e29f132dd3e4b8bba887e33f15f4174a23750420c49e15f4c63ccafdcd7998d35e2c53bc89ad458e1f33c164af8e0ff
SSDEEP 24576:Wo6cLUZxmyg8dOTm7uqX8uIFuI7+qeeiSJhMX2w0rL+lQgeVk1rfEwr1i:WhAixSTb+yiUNX6QgZ1fdi
TLSH
T14B452311B4644AC3E86AC3B600FF96056B3B6E78DA6A5E1B5368BE35F1F371640072D3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

installer

Malware Config

Signatures

Unsigned PE 4 IoCs

Checks for missing Authenticode signature.

resource
SonicAcademy_RSA_KeyGen.exe
unpack001/$TEMP/BASSMOD.dll
unpack001/$TEMP/R2RSARSA.dll
unpack001/$TEMP/keygen.exe

NSIS installer 2 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

File Explorer

SonicAcademy_RSA_KeyGen.exe

.exe 1.2MB
$TEMP/BASSMOD.dll

.dll 33KB
$TEMP/R2RSARSA.dll

.dll 136KB
$TEMP/bgm.xm

823KB
$TEMP/keygen.exe

.exe 710KB

SonicAcademy_RSA_KeyGen.exe

IMPHASH 4f67aeda01a0484282e8c59006b0b352
SHA256 515d4a527b61dbf18d67cd236f84ba37e6325601b0099c7e23f3f44525a58b26
MD5 d8843a38b6012deeca8faf61fe2a4477
SHA1 a45f0b047a860795a0ae0b1eb2fde0a18f359524
SHA512 536d20eab3c4ea763f31b71e00cffd4a9e29f132dd3e4b8bba887e33f15f4174a23750420c49e15f4c63ccafdcd7998d35e2c53bc89ad458e1f33c164af8e0ff
SSDEEP 24576:Wo6cLUZxmyg8dOTm7uqX8uIFuI7+qeeiSJhMX2w0rL+lQgeVk1rfEwr1i:WhAixSTb+yiUNX6QgZ1fdi
TLSH
T14B452311B4644AC3E86AC3B600FF96056B3B6E78DA6A5E1B5368BE35F1F371640072D3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

Major OS version

Entry point

12991

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CopyFileA Sleep GetTickCount CreateFileA GetFileSize GetModuleFileNameA ReadFile GetFileAttributesA SetFileAttributesA ExitProcess SetEnvironmentVariableA GetWindowsDirectoryA GetTempPathA GetCommandLineA lstrlenA GetVersion GetCurrentProcess GetFullPathNameA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread GetLastError CreateDirectoryA CreateProcessA RemoveDirectoryA GetTempFileNameA WriteFile lstrcpyA MoveFileExA lstrcatA GetSystemDirectoryA GetProcAddress CloseHandle SetCurrentDirectoryA MoveFileA CompareFileTime GetShortPathNameA SearchPathA lstrcmpiA SetFileTime lstrcmpA ExpandEnvironmentStringsA lstrcpynA SetErrorMode GlobalFree FindFirstFileA FindNextFileA DeleteFileA SetFilePointer GetPrivateProfileStringA FindClose MultiByteToWideChar FreeLibrary MulDiv WritePrivateProfileStringA LoadLibraryExA GetModuleHandleA GetExitCodeProcess WaitForSingleObject GlobalAlloc

user32

ScreenToClient GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard PostQuitMessage GetWindowRect EnableMenuItem CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA ReleaseDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndDialog RegisterClassA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA ExitWindowsEx GetDC CreateDialogParamA SetTimer GetDlgItem SetWindowLongA SetForegroundWindow LoadImageA IsWindow SendMessageTimeoutA FindWindowExA OpenClipboard TrackPopupMenu AppendMenuA EndPaint DestroyWindow wsprintfA ShowWindow SetWindowTextA

gdi32

SelectObject SetBkMode CreateFontIndirectA SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA

advapi32

RegDeleteKeyA SetFileSecurityA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges RegOpenKeyExA RegEnumValueA RegDeleteValueA RegCloseKey RegCreateKeyExA RegSetValueExA RegQueryValueExA RegEnumKeyA

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$TEMP/BASSMOD.dll

SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
MD5 e4ec57e8508c5c4040383ebe6d367928
SHA1 b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
SHA512 77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
SSDEEP 768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0
TLSH
T130F2E1B43B18CDE2DDC807F41FE4E6A879DB92026A13DBC5D697CA97328B4914D42F11
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

Major OS version

Entry point

73795

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$TEMP/R2RSARSA.dll

SHA256 13bed07548f65041059f2d93b43719df23c5283d9b8bbddfbf76725a5488595b
MD5 e8655d19b3dd3efe346d611b4df00f7b
SHA1 1241a3ca6ad3482ffdefd3a97b114573dc6a8b72
SHA512 8c6692b0c0a1972deda0eb930016e1c02b129dc56b37db10b4b8e02343e1c4edd0666fef263cfc15887764d88608c12bbe56e0cf17d8368caa91150d029b49d2
SSDEEP 3072:byDKjHM7jtFjGSzqEmkdiioQy5VHUp4Bnh/f55cYEvd2IuCDfypTDlHWWE:bGK7sjtNqMFiVHU0PcYcYIuCDfyXTE
TLSH
T15DD312EDC6A54C36C6DB13B12D8F8ADE8C2D503447BF1FA109011B5F6294664EC1EDEA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

Major OS version

Entry point

294916

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$TEMP/keygen.exe

IMPHASH f4d2c3a6b35dbab397d4043b06f995b7
SHA256 8fa29f256dad9db167618f839b1869d2ff48d9d253cb6fbcd9f8cdde585b6823
MD5 d713927fc8d550ccc0a932eabde94fcc
SHA1 b137e2651a97105b7603ba3434fdd17b792adb9f
SHA512 b33a3ede661824e9151b8b4925446247456b016dcce3364ab4ec52556e3f6c24bc815892516233f920789cba45fed572d99dfacde62b2305d0d0256b362d2725
SSDEEP 12288:7Eb6CmonRVnsQ5ogI/U407L4dTHsCXymCn0sTU5EBtpFgg3MUR:7umonR5fG/U40vIHsCnCdUqjQg3MO
TLSH
T12CF4595429DB2DF9D0BFA0FB4D499BB4764E75397A02D4E3B3405B074A242FE0EE1A42
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

Major OS version

Entry point

143246

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

_TrackMouseEvent ord17

msimg32

GradientFill

kernel32

VirtualProtect GetCPInfo GetOEMCP GetACP HeapSize SetUnhandledExceptionFilter WriteFile GetFileType GetStdHandle SetHandleCount IsBadWritePtr VirtualAlloc VirtualFree HeapCreate HeapDestroy ReadFile CloseHandle LCMapStringW LCMapStringA SetFilePointer GetCurrentProcess TerminateProcess ExitProcess GetVersionExA GetStartupInfoA GetModuleHandleA SetCurrentDirectoryA SetEnvironmentVariableA CreateDirectoryA GetLastError GetFullPathNameA GetCurrentDirectoryA GetDriveTypeA HeapReAlloc RtlUnwind RaiseException HeapFree HeapAlloc UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetStdHandle FlushFileBuffers CreateFileA GetLocaleInfoA GetStringTypeA GetStringTypeW IsBadReadPtr IsBadCodePtr QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime InterlockedExchange GetLocalTime FindFirstFileA FindNextFileA FindClose DeleteFileA GetShortPathNameA GlobalLock GlobalUnlock MulDiv GlobalAlloc GlobalFree GetCommandLineA GetSystemInfo GlobalMemoryStatus GetVersion GetComputerNameA GetWindowsDirectoryA GetSystemDirectoryA WinExec FreeLibrary WideCharToMultiByte MultiByteToWideChar LoadLibraryA GetProcAddress Sleep GetTickCount GetModuleFileNameA SetEndOfFile VirtualQuery

user32

PostQuitMessage LoadIconA ReleaseDC InvalidateRect DefWindowProcA BeginPaint LoadCursorA RegisterClassA UnregisterClassA AdjustWindowRectEx EndPaint FillRect TabbedTextOutA GetSysColor MoveWindow GetActiveWindow GetClassLongA SetClassLongA SetWindowLongA IsWindowEnabled EnableWindow SetFocus GetFocus GetWindowLongA GetClientRect InflateRect DrawFocusRect DrawTextA PostMessageA SetWindowTextA GetDlgItemTextA GetDlgCtrlID IsDlgButtonChecked CallWindowProcA MsgWaitForMultipleObjects PeekMessageA GetMessageA TranslateMessage DispatchMessageA MapVirtualKeyA GetWindowRect SetActiveWindow SetWindowPos GetAsyncKeyState GetCursorPos SetCursorPos ShowCursor MessageBoxA EnumDisplaySettingsA ChangeDisplaySettingsA CreateWindowExA ShowWindow SendMessageA DestroyWindow GetDC GetSystemMetrics

gdi32

CreateDIBSection CreateCompatibleDC Rectangle DeleteDC SetStretchBltMode StretchBlt Ellipse MoveToEx LineTo SetPixel GetPixel GetTextExtentPoint32A SetDIBColorTable CreatePalette CreateSolidBrush CreatePen GetTextMetricsA SelectPalette RealizePalette BitBlt SelectObject SetBkMode SetTextColor GetStockObject CreateFontIndirectA DeleteObject GetDeviceCaps

comdlg32

GetSaveFileNameA ChooseColorA GetOpenFileNameA

advapi32

GetUserNameA

shell32

ShellExecuteExA SHGetSpecialFolderPathA ShellExecuteA

ole32

OleInitialize CoCreateInstance IIDFromString CoUninitialize CreateStreamOnHGlobal OleUninitialize CoInitializeEx CLSIDFromProgID

oleaut32

SafeArrayGetElement OleLoadPicture SafeArrayPutElement SafeArrayCopy SafeArrayGetVartype SafeArrayGetLBound SafeArrayGetUBound SysAllocString VariantCopy VariantCopyInd VariantChangeType SysAllocStringByteLen SysFreeString SafeArrayCreate SafeArrayUnaccessData VariantClear VariantInit SafeArrayAccessData SafeArrayGetDim

winmm

sndPlaySoundA mciSendStringA timeEndPeriod timeGetDevCaps timeBeginPeriod timeGetTime

SonicAcademy_RSA_KeyGen.exe

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$TEMP/BASSMOD.dll

generic

$TEMP/R2RSARSA.dll

generic

$TEMP/bgm.xm

$TEMP/keygen.exe

comctl32

msimg32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

winmm

generic