d02278878ba631c8688a2e1d860720dedfcc9770b221a42cbd0c4e085e4c41e1

Sharing

Copy URL Twitter E-mail

General

Target

d02278878ba631c8688a2e1d860720dedfcc9770b221a42cbd0c4e085e4c41e1
Size

5.0MB
MD5

c1d55b4f1f08e001da25650133693eb6
SHA1

336d464fc2586d03fb5fce222144b841ee198e3e
SHA256

d02278878ba631c8688a2e1d860720dedfcc9770b221a42cbd0c4e085e4c41e1
SHA512

7591e3fa12d08a319850473bd02a059a2e2dbeceb487b7c20557f102bd0297b8659498477577d0aeb237867fedc8e4535c25d73db4d410f11d10c267989def56
SSDEEP

98304:D5OQLHL6PlGH2/Oqa/a5Hdn3zT9gWtweOrRp8bd/RjmopVyZqPlIl:DN72kHueiplv7tDOlp8bJRqopVyZ6Y

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/ݿ⼤/NavicatCracker.exe	upx

Files

d02278878ba631c8688a2e1d860720dedfcc9770b221a42cbd0c4e085e4c41e1
.zip
ݿ⼤/NavicatCracker.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

UPX0
Size: - Virtual size: 10.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.7MB - Virtual size: 4.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 362KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Exports

Exports

ks_arch_supported
ks_asm
ks_close
ks_errno
ks_free
ks_open
ks_option
ks_strerror
ks_version

Sections

.text
Size: 8.0MB - Virtual size: 8.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 156KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 282KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 197KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ݿ⼤/NavicatCrackerʹֲ.docx
.docx office2007
ݿ⼤/װصַ.txt

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 10.9MB

UPX1 Size: 4.7MB - Virtual size: 4.7MB

.rsrc Size: 362KB - Virtual size: 364KB

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.text Size: 8.0MB - Virtual size: 8.0MB

.rdata Size: 5.1MB - Virtual size: 5.1MB

.data Size: 156KB - Virtual size: 205KB

.pdata Size: 282KB - Virtual size: 282KB

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 1.7MB - Virtual size: 1.7MB

.reloc Size: 197KB - Virtual size: 197KB

UPX0
Size: - Virtual size: 10.9MB

UPX1
Size: 4.7MB - Virtual size: 4.7MB

.rsrc
Size: 362KB - Virtual size: 364KB

.text
Size: 8.0MB - Virtual size: 8.0MB

.rdata
Size: 5.1MB - Virtual size: 5.1MB

.data
Size: 156KB - Virtual size: 205KB

.pdata
Size: 282KB - Virtual size: 282KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

.reloc
Size: 197KB - Virtual size: 197KB