74c007bb84f6ed4c65c82711973b31efbf5726b481c1ad7b5e527640e126ab9e

Sharing

Copy URL Twitter E-mail

General

Target

74c007bb84f6ed4c65c82711973b31efbf5726b481c1ad7b5e527640e126ab9e
Size

1.1MB
MD5

06b38a38f1c108061016eb486f53cb60
SHA1

d9d8c35f041edd2edf1260af4232afa336b15291
SHA256

74c007bb84f6ed4c65c82711973b31efbf5726b481c1ad7b5e527640e126ab9e
SHA512

589536e700da1faad34ec5a59cd6c7461c0ee8854cb0f35ee955937ff497bfbbeb92a9cc098db3437ea3ae5eeb97f83c1a24c119170df468eaeaf61475fc0e65
SSDEEP

24576:8q5TfcdHj4fmb12qD0MmV0VMXLG3on1Gx1s4oo5osSxf:8UTsamhxdo1no5oF

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
static1/unpack001/out.upx	autoit_exe

Files

74c007bb84f6ed4c65c82711973b31efbf5726b481c1ad7b5e527640e126ab9e
.exe windows x86

Code Sign

01:a0:c3:e3:bc:06:9f:71:b4:64:aa:d3:40:63:e2:09
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2015, 00:00

Not After

24/02/2016, 12:00

Subject

CN=CHIP Digital GmbH,O=CHIP Digital GmbH,L=München,ST=Bavaria,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

dd:86:96:8f:a6:7b:1f:54:f5:30:b5:77:de:73:ac:39:00:81:af:33
Signer

Actual PE Digest

dd:86:96:8f:a6:7b:1f:54:f5:30:b5:77:de:73:ac:39:00:81:af:33

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=CHIP Digital GmbH,O=CHIP Digital GmbH,L=München,ST=Bavaria,C=DE

29/09/2022, 18:59
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 335KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 831KB - Virtual size: 832KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 557KB - Virtual size: 557KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 830KB - Virtual size: 829KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

01:a0:c3:e3:bc:06:9f:71:b4:64:aa:d3:40:63:e2:09Certificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

dd:86:96:8f:a6:7b:1f:54:f5:30:b5:77:de:73:ac:39:00:81:af:33Signer

Signature Validations

Verification

29/09/2022, 18:59 Valid: false

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 1.3MB

UPX1 Size: 335KB - Virtual size: 336KB

.rsrc Size: 831KB - Virtual size: 832KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 557KB - Virtual size: 557KB

.rdata Size: 179KB - Virtual size: 179KB

.data Size: 24KB - Virtual size: 39KB

.rsrc Size: 830KB - Virtual size: 829KB

.reloc Size: 41KB - Virtual size: 41KB

01:a0:c3:e3:bc:06:9f:71:b4:64:aa:d3:40:63:e2:09
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

dd:86:96:8f:a6:7b:1f:54:f5:30:b5:77:de:73:ac:39:00:81:af:33
Signer

29/09/2022, 18:59
Valid: false

UPX0
Size: - Virtual size: 1.3MB

UPX1
Size: 335KB - Virtual size: 336KB

.rsrc
Size: 831KB - Virtual size: 832KB

.text
Size: 557KB - Virtual size: 557KB

.rdata
Size: 179KB - Virtual size: 179KB

.data
Size: 24KB - Virtual size: 39KB

.rsrc
Size: 830KB - Virtual size: 829KB

.reloc
Size: 41KB - Virtual size: 41KB