754c3df1302e23f23e5e2c0de498d9ac8e7f0607947694fa17c54ed572ebc029

General

Target

754c3df1302e23f23e5e2c0de498d9ac8e7f0607947694fa17c54ed572ebc029
Size

5.5MB
MD5

df166caf26748eee0a33c53c40d5dcd9
SHA1

e9515831002597be2ecbbc21e012e9079b7f228e
SHA256

754c3df1302e23f23e5e2c0de498d9ac8e7f0607947694fa17c54ed572ebc029
SHA512

bfaf0002c758f695d276a1cb8ad70d2bf3786f7b3992bed4d8f4bc3ff0b0f234de4a4794e0b5a6f2858e306ad6d7ce92a805e11d25e85fb2f0a6162ed01376bb
SSDEEP

98304:L3vEZWZNCvFpDyVMvdIWXe+q2WWmQNfTBBGzQuKLQ59PzNPtIxo2ZEMUL+PEM/ZB:b7avfDyed9e+q2WWmQNLBBGZlrf+ZEr+

Score

8^/10

upx pyinstaller

Malware Config

Signatures

UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx
Detects Pyinstaller 1 IoCs
pyinstaller

Processes:

resource yara_rule

sample pyinstaller

resource	yara_rule
sample	upx

resource	yara_rule
sample	pyinstaller

Files

754c3df1302e23f23e5e2c0de498d9ac8e7f0607947694fa17c54ed572ebc029
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

UPX0
Size: - Virtual size: 224KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 103KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 224KB

UPX1 Size: 103KB - Virtual size: 104KB

.rsrc Size: 59KB - Virtual size: 60KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 132KB - Virtual size: 131KB

.rdata Size: 62KB - Virtual size: 61KB

.data Size: 3KB - Virtual size: 44KB

.pdata Size: 7KB - Virtual size: 7KB

.gfids Size: 512B - Virtual size: 172B

.rsrc Size: 59KB - Virtual size: 58KB

.reloc Size: 2KB - Virtual size: 1KB

UPX0
Size: - Virtual size: 224KB

UPX1
Size: 103KB - Virtual size: 104KB

.rsrc
Size: 59KB - Virtual size: 60KB

.text
Size: 132KB - Virtual size: 131KB

.rdata
Size: 62KB - Virtual size: 61KB

.data
Size: 3KB - Virtual size: 44KB

.pdata
Size: 7KB - Virtual size: 7KB

.gfids
Size: 512B - Virtual size: 172B

.rsrc
Size: 59KB - Virtual size: 58KB

.reloc
Size: 2KB - Virtual size: 1KB