Static task
static1
Behavioral task
behavioral1
Sample
Shell-996933_29-07-2020.exe
Resource
win7-20220414-en
General
-
Target
b6be90e3f72bce2fe0ec0a1d5c4117d81955b214f5de72dd189739ab8175ef30
-
Size
449KB
-
MD5
c5f0163090b0c9d631611e234fad8699
-
SHA1
b80497a9e40b8d64aed71ad21b65e3477693d7f2
-
SHA256
b6be90e3f72bce2fe0ec0a1d5c4117d81955b214f5de72dd189739ab8175ef30
-
SHA512
42e0b15eb07c02608107a0177869b7acdb9c98bf44767d9ba0081f5fb28f15e5fc7e34c2d55ef6a20ba9436198d09653921aade9f7c2aa9f7f57b3c587c2cf49
-
SSDEEP
6144:xBVsdqQOmWZgQnhdMdkYbO9lkDfQVVNUcZibxOHtojgnfW53iyIHEuEppDKkok7h:x4Pny7r3ofUNYFOHtLW9aHWpnPgiQ3y
Malware Config
Signatures
-
Processes:
resource yara_rule static1/unpack001/Shell-996933_29-07-2020.exe upx
Files
-
b6be90e3f72bce2fe0ec0a1d5c4117d81955b214f5de72dd189739ab8175ef30.rar
-
Shell-996933_29-07-2020.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 448KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 451KB - Virtual size: 452KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 372KB - Virtual size: 372KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 377KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ