Static task
static1
Behavioral task
behavioral1
Sample
Satups.zip
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Satups.zip
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
Satups.exe
Resource
win7-20230220-en
General
-
Target
Satups.zip
-
Size
13.2MB
-
MD5
53795ea7b0965ce3baa171895070b14b
-
SHA1
0b7b46abf32498ca3d9fc9de79666d29651f14d7
-
SHA256
c71d728996167fe52e7a5c678be3ea2e7e65bb839c660d6f8fe4d8f84b49d4b6
-
SHA512
21d55c917e9d4c4203fc9a649e6909c68df6ef4661e807e8618c53906331c90b8ccafc1eee906253b8623dee3b45110fc0bf12774d9cf28e4871f8183969c65e
-
SSDEEP
196608:XAkRNdnAyb6JhJ8UaveqxpxwXjvbywYlEQJb2o0wB9eQ7F/P9N:X3RNxAyb2O1PxwTv+7lNbCSFtN
Malware Config
Signatures
Files
-
Satups.zip.zip
-
Satups.exe.exe windows x86
6f03355865cb02d13e38a1ad89ce05a6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
OffsetRect
CharUpperBuffW
ole32
CoInitialize
Sections
.text Size: - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mk0 Size: - Virtual size: 9.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.os/ Size: 1024B - Virtual size: 876B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.!IA Size: 11.8MB - Virtual size: 11.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 351KB - Virtual size: 351KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ