dc67dd503749c19a31e385b1f233424334c29d67893bd1be05165aea810b83cc

Sharing

Copy URL

Twitter E-mail

General

Target

dc67dd503749c19a31e385b1f233424334c29d67893bd1be05165aea810b83cc
Size

280KB
MD5

77759a4d4e42f7f8ebcc514328a93ee8
SHA1

52d60b6b18c4edba82ddef424bf8a4ca74f66841
SHA256

dc67dd503749c19a31e385b1f233424334c29d67893bd1be05165aea810b83cc
SHA512

379c1acfd8a50d8d9a66e9248466f77996ebdc14d5ca66a98d81813c0738c5f5f2c9dc8f9d954853408c7afb0e93d8329386460705605b8289def578fff7ff7d
SSDEEP

6144:HtXtgU/PjbrMLlb9NI0L3caBQ6C9FHhWB7haSdeGHEgmcz5ueXj:HtXtFXjIV9i0LT6tnHhsA+eGHEgJr

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

dc67dd503749c19a31e385b1f233424334c29d67893bd1be05165aea810b83cc
.exe windows x86

bd653b0c319981f28a2fb323427141b9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellAboutW

advapi32

RegCreateKeyW
RegSetValueExW
RegQueryValueExW
RegCloseKey

oleaut32

SysFreeString
SysAllocString

ole32

CoCreateInstance

ntdll

WinSqmAddToStream

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCommandLineW
GetProfileIntW
LocalAlloc
LocalFree
lstrcmpW
GetProfileStringW
LocalReAlloc
TerminateProcess
lstrlenW
CloseHandle
WaitForSingleObject
SetEvent
CreateThread
CreateEventW
ResetEvent
GlobalUnlock
GlobalSize
GlobalLock
Sleep
GlobalFree
GlobalAlloc
GlobalReAlloc
GetCurrentProcess
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
HeapSetInformation
UnhandledExceptionFilter
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedExchange

gdi32

SetTextColor
CreateFontIndirectW
SelectObject
DeleteObject
SetBkColor
SetBkMode

user32

SetDlgItemTextW
CheckMenuItem
CheckMenuRadioItem
SetWindowPos
OffsetRect
MapWindowPoints
GetClientRect
EnableWindow
LoadMenuW
SetWindowLongW
GetWindowLongW
GetMenu
CreateDialogParamW
GetDlgItem
DestroyMenu
DestroyWindow
SetMenu
GetWindowRect
SystemParametersInfoW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
IsChild
IsDialogMessageW
GetMessageW
LoadAcceleratorsW
SendMessageW
LoadStringW
SetProcessDefaultLayout
GetProcessDefaultLayout
SetProcessDPIAware
SetCursor
SetFocus
SetWindowTextW
CheckRadioButton
GetSubMenu
MessageBeep
MessageBoxW
EndDialog
DialogBoxParamW
GetSysColor
CloseClipboard
CharNextA
GetClipboardData
OpenClipboard
CallWindowProcW
HideCaret
DefWindowProcW
EnableMenuItem
IsClipboardFormatAvailable
GetDlgCtrlID
PostQuitMessage
DrawTextW
CheckDlgButton
GetWindowTextW
SetDlgItemInt
CharNextW
RegisterClassExW
GetSysColorBrush
LoadCursorW
LoadIconW
InvalidateRect
UpdateWindow
ShowWindow
CreateWindowExW

msvcrt

_wcsrev
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_amsg_exit
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
??3@YAXPAX@Z
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler4_common
_controlfp
memmove
toupper
_CxxThrowException
wcstoul
__CxxFrameHandler3
memset
memcpy
wcschr

Sections

.text
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.UPX0
Size: 108KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bd653b0c319981f28a2fb323427141b9

Headers

DLL Characteristics

File Characteristics

Imports

shell32

advapi32

oleaut32

ole32

ntdll

kernel32

gdi32

user32

msvcrt

Sections

.text Size: 75KB - Virtual size: 75KB

.data Size: 2KB - Virtual size: 4KB

.rsrc Size: 86KB - Virtual size: 86KB

.reloc Size: 6KB - Virtual size: 6KB

.UPX0 Size: 108KB - Virtual size: 260KB

.text
Size: 75KB - Virtual size: 75KB

.data
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 86KB - Virtual size: 86KB

.reloc
Size: 6KB - Virtual size: 6KB

.UPX0
Size: 108KB - Virtual size: 260KB