e0917b9ec6a11cd9df9a1a88fc671e0e64015b78dd41de719531abb8ee0679b5

Sharing

Copy URL Twitter E-mail

General

Target

e0917b9ec6a11cd9df9a1a88fc671e0e64015b78dd41de719531abb8ee0679b5
Size

154KB
MD5

593ca02763058de0ddabadc6660bf29f
SHA1

cc70439e2ca435564a0bea4fff8f1922442dace9
SHA256

e0917b9ec6a11cd9df9a1a88fc671e0e64015b78dd41de719531abb8ee0679b5
SHA512

6be4c503cea6238676a68993ed6b4d56e33c609f7f75e6e2ea44d219f8bab87a5c1fbb5f8811aee34fc11d6c94647371374d531bfd7cc16cfb81127daf73b081
SSDEEP

3072:QDa0ifaBZ2ylTvi9Shbu2BDwH5YLolbQMxgMdFd5z65XGlQ/fOHx+RVIBPh3VEKV:6a0ifaBZ2ylTvi9+bzBDwH5YcbQMxgMS

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

e0917b9ec6a11cd9df9a1a88fc671e0e64015b78dd41de719531abb8ee0679b5
.exe windows x86

8c72aee2eabb36ff7be0f7a9f695344d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetCommandLineW
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange

user32

AllowSetForegroundWindow

msvcrt

memset
__getmainargs
_controlfp
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit

ntdll

WinSqmAddToStream

ole32

CoUninitialize
CoCreateInstance
CoInitializeEx

shell32

ShellExecuteExW

shlwapi

PathGetArgsW
StrCmpW
UrlGetPartW

oleaut32

SysFreeString
SysAllocString

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 458B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

UPX0
Size: 144KB - Virtual size: 380KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8c72aee2eabb36ff7be0f7a9f695344d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcrt

ntdll

ole32

shell32

shlwapi

oleaut32

Sections

.text Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 900B

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 458B

UPX0 Size: 144KB - Virtual size: 380KB

.text
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 900B

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 458B

UPX0
Size: 144KB - Virtual size: 380KB