6b4883ddd0fca99c28fac9ce30663ae31217e68c724d46d6be97cee3e4e14c6d

General

Target

6b4883ddd0fca99c28fac9ce30663ae31217e68c724d46d6be97cee3e4e14c6d
Size

352KB
MD5

4ac3eaaa7cadcee29d4e51929698ce70
SHA1

1578d585e820aecd0eaaf7c68585d7279740a9f4
SHA256

6b4883ddd0fca99c28fac9ce30663ae31217e68c724d46d6be97cee3e4e14c6d
SHA512

1fa36c5acd553a93f12016e3e2ca0415a65e6d24cfd1749c130bb173ff379c1aaba0a0b5264b4a4bd2537a9efc474d4ea07524d11dbd89009ee78e8a3178f606
SSDEEP

6144:9vFLwuUbQxQJtAVPkM1wtKDxiswkBYK5Tz77uCYXilJbg5O5/9Wkd:VNHz5kMXTYK5/7+XST5lpd

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

6b4883ddd0fca99c28fac9ce30663ae31217e68c724d46d6be97cee3e4e14c6d
.exe windows x86

73ec795c6c369c6ce2c3b4c3f6477daa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
DuplicateHandle
GetShortPathNameA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW

user32

DefWindowProcA
AdjustWindowRectEx

Sections

0
Size: 28KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

2
Size: 4KB - Virtual size: 33.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

4
Size: 48KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

5
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

6
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.UPX
Size: 240KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

73ec795c6c369c6ce2c3b4c3f6477daa

Headers

File Characteristics

Imports

kernel32

user32

Sections

0 Size: 28KB - Virtual size: 42KB

1 Size: 4KB - Virtual size: 4KB

2 Size: 4KB - Virtual size: 33.0MB

3 Size: 12KB - Virtual size: 8KB

4 Size: 48KB - Virtual size: 71KB

5 Size: 4KB - Virtual size: 3KB

6 Size: 8KB - Virtual size: 28KB

.UPX Size: 240KB - Virtual size: 240KB

0
Size: 28KB - Virtual size: 42KB

1
Size: 4KB - Virtual size: 4KB

2
Size: 4KB - Virtual size: 33.0MB

3
Size: 12KB - Virtual size: 8KB

4
Size: 48KB - Virtual size: 71KB

5
Size: 4KB - Virtual size: 3KB

6
Size: 8KB - Virtual size: 28KB

.UPX
Size: 240KB - Virtual size: 240KB