f8a741597853c48d9aaa7fce8f7ddc43f2825718d7bd3d597d655082fde7f1c1

General

Target

f8a741597853c48d9aaa7fce8f7ddc43f2825718d7bd3d597d655082fde7f1c1
Size

119KB
MD5

74b1f7faab0fb34074d538a123e76c27
SHA1

a79c4aab1126b34d3212901614fb611bddddea36
SHA256

f8a741597853c48d9aaa7fce8f7ddc43f2825718d7bd3d597d655082fde7f1c1
SHA512

1f7a03a5d1c05290cb12d1feda208ad27c2165e454152a55b284550c4176afa9a7c414e457ce8b0f42d2af2dec9e39d8fcbe1f10503ba71903aacd59b86b449f
SSDEEP

3072:OH2ajos/SWG5QCLbuCt1nEI2ciPoE9HZozyCH7EG2:zadS1nLcZWyCH/2

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

f8a741597853c48d9aaa7fce8f7ddc43f2825718d7bd3d597d655082fde7f1c1
.exe windows x86

74b8026ed527159004cd3554da732ecd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetCurrentProcessId
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
CompareStringW
GetLastError
GetModuleHandleA
WritePrivateProfileStringW

msvcrt

_controlfp
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_amsg_exit
_initterm
exit
_XcptFilter
_exit
_cexit
__getmainargs
wcstok
_vsnwprintf

shlwapi

UrlEscapeW

shell32

SHGetFolderPathW

wdscore

CurrentIP
ConstructPartialMsgVW
WdsSetupLogMessageW

advapi32

RegCloseKey
RegOpenKeyExW
RegCreateKeyExW
RegQueryValueExW

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.UPX0
Size: 108KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

74b8026ed527159004cd3554da732ecd

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

shlwapi

shell32

wdscore

advapi32

Sections

.text Size: 7KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 676B

.UPX0 Size: 108KB - Virtual size: 260KB

.text
Size: 7KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 676B

.UPX0
Size: 108KB - Virtual size: 260KB