Behavioral task
behavioral1
Sample
UPX脱壳终结者2.0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
UPX脱壳终结者2.0.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
绿色先锋首页_greenxf.com.url
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
绿色先锋首页_greenxf.com.url
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
软件更新.url
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
软件更新.url
Resource
win10v2004-20220812-en
General
-
Target
723c616e03637e89d1bb01c789d1494ae9a93bba19e098c45bd89293d81844af
-
Size
1.8MB
-
MD5
edb6aa284a0e3ece2f08564409f7b57e
-
SHA1
dafaf2e6d5ffbdf3c7c33b266ffac4cfe1595a7d
-
SHA256
723c616e03637e89d1bb01c789d1494ae9a93bba19e098c45bd89293d81844af
-
SHA512
f58215149f34b04c86c0136cbd413e68f1c09e7e9e521dba0ff8078958e0179bc4dfe858875c8c7dbac761b86ee255fdf89f66b7656f91c1ef5a95783413b75b
-
SSDEEP
49152:rk0vKbIh/epLOl3PvVXhIxKvhRWlu+FuG1YAWoeG5L:rrAIh/ll/RGxKvhRWlu+FF1/f
Malware Config
Signatures
-
resource yara_rule static1/unpack001/UPX脱壳终结者2.0.exe themida
Files
-
723c616e03637e89d1bb01c789d1494ae9a93bba19e098c45bd89293d81844af.rar
-
UPX脱壳终结者2.0.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 116KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
绿色先锋首页_greenxf.com.url.url
-
软件使用说明greenxf.com.txt
-
软件更新.url.url.url