ab63af19eed70da090e6782424890c9fe868acf52ea8ca5f97d559ef89ce593d

General

Target

ab63af19eed70da090e6782424890c9fe868acf52ea8ca5f97d559ef89ce593d
Size

45KB
MD5

6142322a0c7d7ce98c62780e697c1855
SHA1

221a2d4d821c7afecd744b5d2c593b093554d835
SHA256

ab63af19eed70da090e6782424890c9fe868acf52ea8ca5f97d559ef89ce593d
SHA512

687b1095b99c8da68af3e3e5f561e84ca37f02035b06622f9a369d76e1604a3c18f1d4e9ea26fea8c38bea5d1035f68e8828ee3dc5077ad86df10952f0a24d79
SSDEEP

768:5XpSmqnDqmfCfDImUj7qVfeGKNVTI5EjilQkg8+tyu2myApKIfLZ3EBZyaHGQR:5XIPKfDIgVfaNFaEkJ+0sh90f/mQ

Score

8^/10

upx vmprotect

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
static1/unpack001/out.upx	vmprotect

Files

ab63af19eed70da090e6782424890c9fe868acf52ea8ca5f97d559ef89ce593d
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 43KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512B - Virtual size: 321B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.www
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

cyc
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp1
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 48KB

UPX1 Size: 43KB - Virtual size: 44KB

.rsrc Size: 1024B - Virtual size: 4KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 512B - Virtual size: 321B

.www Size: 2KB - Virtual size: 1KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 1KB

cyc Size: 512B - Virtual size: 4B

.rsrc Size: 43KB - Virtual size: 43KB

.vmp0 Size: 1024B - Virtual size: 536B

.vmp1 Size: 11KB - Virtual size: 11KB

.reloc Size: 512B - Virtual size: 344B

UPX0
Size: - Virtual size: 48KB

UPX1
Size: 43KB - Virtual size: 44KB

.rsrc
Size: 1024B - Virtual size: 4KB

.text
Size: 512B - Virtual size: 321B

.www
Size: 2KB - Virtual size: 1KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 1KB

cyc
Size: 512B - Virtual size: 4B

.rsrc
Size: 43KB - Virtual size: 43KB

.vmp0
Size: 1024B - Virtual size: 536B

.vmp1
Size: 11KB - Virtual size: 11KB

.reloc
Size: 512B - Virtual size: 344B