9009ef77c2605ee7b6c9713b86f3920d62536e41d094066ef86e835835950910

Sharing

Copy URL

Twitter E-mail

General

Target

9009ef77c2605ee7b6c9713b86f3920d62536e41d094066ef86e835835950910
Size

328KB
MD5

80951a1e4bb55989ad122e5752ed9100
SHA1

6560d616570d4a5f8a7045c741ff678e2454c633
SHA256

9009ef77c2605ee7b6c9713b86f3920d62536e41d094066ef86e835835950910
SHA512

e51c5a0e877b59c85db1c68b8bd7156933fb64b5d4da466e22f9aeed3dc025437b544e0d15ce5c8c64840ffc8a812384264cd04231852494ac44fb3e3ec86bc1
SSDEEP

6144:XCu/wS5i+qYLJV0lO6fs7FwhhYtD3zIwr:XCuxQSDkXsxK+dz7

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

9009ef77c2605ee7b6c9713b86f3920d62536e41d094066ef86e835835950910
.exe windows x86

133422442379b1db6392ba00c40499c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntA
GetModuleFileNameA
SetLastError
Sleep
GetTickCount
WaitForSingleObject
SetWaitableTimer
CreateWaitableTimerA
CreateProcessA
FindFirstFileA
DeleteFileA
GetPrivateProfileStringA
WritePrivateProfileStringA
SetCurrentDirectoryA
CreateNamedPipeA
DisconnectNamedPipe
FlushFileBuffers
CreateThread
CompareStringW
CompareStringA
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
GetTimeZoneInformation
SetStdHandle
SetFilePointer
GlobalFree
GlobalAlloc
FreeLibrary
GetSystemTime
CreateFileA
GetLastError
GetFileSize
CloseHandle
ReadFile
WriteFile
ExpandEnvironmentStringsA
GetVersionExA
GetSystemDirectoryA
LoadLibraryA
lstrcpynA
GetProcAddress
HeapFree
HeapAlloc
GetCommandLineA
GetProcessHeap
GetStartupInfoA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
GetCurrentThread
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
VirtualAlloc
HeapReAlloc
ExitProcess
GetStdHandle
SetHandleCount
GetFileType
RtlUnwind
HeapSize
RaiseException
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSection
SetConsoleCtrlHandler
InterlockedExchange
GetConsoleCP
GetConsoleMode
SetEnvironmentVariableA

wininet

InternetOpenA
InternetOpenUrlA
InternetCloseHandle
InternetGetConnectedState

user32

PostMessageA
RegisterWindowMessageA
wsprintfA

advapi32

SetSecurityDescriptorDacl
ControlService
DeleteService
StartServiceCtrlDispatcherA
CreateServiceA
QueryServiceStatus
RegisterServiceCtrlHandlerA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
StartServiceA
SetServiceStatus
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
InitializeSecurityDescriptor

Sections

.text
Size: 144KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

UPX0
Size: 144KB - Virtual size: 380KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

133422442379b1db6392ba00c40499c8

Headers

File Characteristics

Imports

kernel32

wininet

user32

advapi32

Sections

.text Size: 144KB - Virtual size: 140KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 8KB - Virtual size: 12KB

.rsrc Size: 4KB - Virtual size: 1KB

UPX0 Size: 144KB - Virtual size: 380KB

.text
Size: 144KB - Virtual size: 140KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 8KB - Virtual size: 12KB

.rsrc
Size: 4KB - Virtual size: 1KB

UPX0
Size: 144KB - Virtual size: 380KB