Static task
static1
Behavioral task
behavioral1
Sample
._cache_?????Srv.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
._cache_?????Srv.exe
Resource
win10v2004-20220414-en
Behavioral task
behavioral3
Sample
?????.exe
Resource
win7-20220414-en
Behavioral task
behavioral4
Sample
?????.exe
Resource
win10v2004-20220414-en
Behavioral task
behavioral5
Sample
??????.url
Resource
win7-20220414-en
Behavioral task
behavioral6
Sample
??????.url
Resource
win10v2004-20220414-en
General
-
Target
41a562909e9cea43a4b07230e924dc6360df5851d901e0d4722daa6d90863b5b
-
Size
1.2MB
-
MD5
3783c01d995ab0c2ada589305e98dc04
-
SHA1
a8cb4a2519c4c1a8ebb700ff9181235bf82208a6
-
SHA256
41a562909e9cea43a4b07230e924dc6360df5851d901e0d4722daa6d90863b5b
-
SHA512
a2ca24f71c3019393b9a8e6cf379ce37d31b11f360ef6efd567175dbcd6c84121ddab62a71157eaaba9abeead3fcfb7ec1ba8684d565b84965a56383b1f7be5c
-
SSDEEP
24576:XAE3mx7IR3uCFAOY7wPKln+z3yhskoInTxiokH9gv2f7KOAw+ws:5qUFAOY7wiln+z8skF9sam70ws
Malware Config
Signatures
-
Processes:
resource yara_rule static1/unpack001/._cache_?????Srv.exe upx
Files
-
41a562909e9cea43a4b07230e924dc6360df5851d901e0d4722daa6d90863b5b.zip
-
._cache_?????Srv.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
?????.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 615KB - Virtual size: 614KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 57B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
??????.txt
-
??????.url.url