Static task
static1
General
-
Target
pupyPE.tar.gz
-
Size
4.4MB
-
MD5
0630a1361299806ce435fa388123e700
-
SHA1
f7c48eb85c423d4cf71a0faaac7d44292db24249
-
SHA256
9558734841819c42dc8d8ed8fb1b368323fc7af01c167920ae5edca1e3390fa3
-
SHA512
8529a4e94b2d3342566ae5bd08bb4092db04b436fa47fffbc8b68bc81a58f207ae3f041c535aaaa398be06d9923289629e5ffd48063a450ba7db549cf23c241c
-
SSDEEP
98304:s0cGNVLtJBU+L6EcZqqxWE53ZWvAp2Y/QZat9fkso3UGMd:PcGfWkvc/8Iee2Ye4msokGMd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/pupyx64.gBvvsG.exe
Files
-
pupyPE.tar.gz.tar
-
pupyx64.gBvvsG.exe.exe windows:5 windows x64 arch:x64
f00447512a354e59d39d2818aaba4a17
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
user32
RegisterClassExA
MsgWaitForMultipleObjects
TranslateMessage
CreateWindowExA
PeekMessageA
DefWindowProcA
DispatchMessageA
kernel32
GetEnvironmentStringsW
ReadFile
SetEndOfFile
GetLastError
CreateThread
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleHandleA
OutputDebugStringA
VirtualFree
VirtualAlloc
GetTempPathA
OpenProcess
SetLastError
VirtualAllocEx
CloseHandle
WriteProcessMemory
ResumeThread
HeapAlloc
HeapFree
GetProcessHeap
IsBadReadPtr
RtlAddFunctionTable
VirtualProtect
GetCurrentThreadId
CreateRemoteThread
GetCommandLineA
GetStartupInfoA
MultiByteToWideChar
WideCharToMultiByte
HeapReAlloc
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
RtlUnwindEx
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
HeapSetInformation
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
EnterCriticalSection
LeaveCriticalSection
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
FlushFileBuffers
HeapSize
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xzdata Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ