fb058ee32383f99f6207c99af99d494b6723dfe8852e8ce61a6a8edc95ae31af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb058ee32383f99f6207c99af99d494b6723dfe8852e8ce61a6a8edc95ae31af
Size

284KB
MD5

147a821664818e17d6f13f10c40c9601
SHA1

e15f105c026d947c4046072fb900b3827747b9bc
SHA256

fb058ee32383f99f6207c99af99d494b6723dfe8852e8ce61a6a8edc95ae31af
SHA512

235c3e6e8d35b27d24de2a7f5b23b626c48e82db2c9c151364b83d2d930048ad24f85c1141c67e129e56d5d0d678209e3821e7cb6480c42faa1026a701b3dc73
SSDEEP

6144:NvOQ2+EZBclx+f614Geqymew3cMC5fNM3cMHSYKTtDVP4FPCAyk:NWQ9EZGd49w3GfNMsMHSZ3P4FKAyk

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/AVLPK-BlackMoonʬרù.exe	upx

Files

fb058ee32383f99f6207c99af99d494b6723dfe8852e8ce61a6a8edc95ae31af
.zip
AVLPK-BlackMoonʬרù.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 278KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 476KB - Virtual size: 473KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 764KB - Virtual size: 761KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ