Behavioral task
behavioral1
Sample
keygen.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
keygen.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
ppi.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
ppi.exe
Resource
win10v2004-20220812-en
General
-
Target
21d8e5d8a6ea3959991c598a68b539f1bd7887fccaefc550ab296b8f8cbde68e
-
Size
224KB
-
MD5
b9871a8715fb92c2777cde01ca66b7be
-
SHA1
70f5f74af74c41b4c6f814a0f17e42874c7c8e25
-
SHA256
21d8e5d8a6ea3959991c598a68b539f1bd7887fccaefc550ab296b8f8cbde68e
-
SHA512
ee5ab40ffc73a5a6dac890042ab49ffdb374ce7ba41803753e6190308be4b472158f1583bd43b9b4a4ca38c8368941ad7cbc9aaa59bb93aa8593715a2e7ce7b3
-
SSDEEP
6144:GQq5r12LXOMEY2gJ71HD8qXth+Ey8Akn1IZWcz/hjs:Fq5B2rO7KjH9hvybEIZH/ts
Malware Config
Signatures
-
resource yara_rule static1/unpack001/keygen.exe upx static1/unpack001/ppi.exe upx
Files
-
21d8e5d8a6ea3959991c598a68b539f1bd7887fccaefc550ab296b8f8cbde68e.cab
-
keygen.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 176KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
ppi.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 224KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 176KB - Virtual size: 174KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ