476cdc0e92029b19993ae4524860fc036cf157ef738d638738dc549ce8040bfe

General

Target

476cdc0e92029b19993ae4524860fc036cf157ef738d638738dc549ce8040bfe
Size

65KB
MD5

2099f5d9f6f9a92eb7d3f432155b7650
SHA1

1dc397da007b3ca53d3d34689fd66db9335a80c6
SHA256

476cdc0e92029b19993ae4524860fc036cf157ef738d638738dc549ce8040bfe
SHA512

0b99b2fdf715ad8d04223cd7c9fe2f42844fc5c3817665ad4ee5e41af27f52efc19e96a5440152cd2f962dc1a12fa55e69b29db50befacd1a2a69ac8495b4a90
SSDEEP

1536:RU/Cp6F8go8mnEVySJoCQCTsUShGuZiA+6vUOQ65CACZdMz:mCMFNo8AbCrXPuZ6SUOQ6AACO

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

476cdc0e92029b19993ae4524860fc036cf157ef738d638738dc549ce8040bfe
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

NS_Alloc
NS_CStringCloneData
NS_CStringContainerFinish
NS_CStringContainerInit
NS_CStringContainerInit2
NS_CStringCopy
NS_CStringGetData
NS_CStringGetIsVoid
NS_CStringGetMutableData
NS_CStringSetData
NS_CStringSetDataRange
NS_CStringSetIsVoid
NS_CStringToUTF16
NS_CycleCollectorForget
NS_CycleCollectorForget2
NS_CycleCollectorSuspect
NS_CycleCollectorSuspect2
NS_DebugBreak
NS_DestroyXPTCallStub
NS_Free
NS_GetComponentManager
NS_GetComponentRegistrar
NS_GetDebug
NS_GetFrozenFunctions
NS_GetMemoryManager
NS_GetServiceManager
NS_GetTraceRefcnt
NS_GetXPTCallStub
NS_InitXPCOM2
NS_InvokeByIndex
NS_LogAddRef
NS_LogCOMPtrAddRef
NS_LogCOMPtrRelease
NS_LogCtor
NS_LogDtor
NS_LogInit
NS_LogRelease
NS_LogTerm
NS_NewLocalFile
NS_NewNativeLocalFile
NS_Realloc
NS_RegisterXPCOMExitRoutine
NS_ShutdownXPCOM
NS_StringCloneData
NS_StringContainerFinish
NS_StringContainerInit
NS_StringContainerInit2
NS_StringCopy
NS_StringGetData
NS_StringGetIsVoid
NS_StringGetMutableData
NS_StringSetData
NS_StringSetDataRange
NS_StringSetIsVoid
NS_UTF16ToCString
NS_UnregisterXPCOMExitRoutine

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 28KB

UPX1 Size: 4KB - Virtual size: 4KB

.rsrc Size: 3KB - Virtual size: 4KB

.rmnet Size: 56KB - Virtual size: 60KB

UPX0
Size: - Virtual size: 28KB

UPX1
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 3KB - Virtual size: 4KB

.rmnet
Size: 56KB - Virtual size: 60KB