e6b65bc8a3174f720511e71a8f4e2ce63e6e0d94a68204cba98853ac19fb0480

Sharing

Copy URL Twitter E-mail

General

Target

e6b65bc8a3174f720511e71a8f4e2ce63e6e0d94a68204cba98853ac19fb0480
Size

487KB
MD5

7bf84260e26c04721b16e7540c1cacd5
SHA1

dd8d446b7501972ef5b5cb385a4aa3cf8566d4a7
SHA256

e6b65bc8a3174f720511e71a8f4e2ce63e6e0d94a68204cba98853ac19fb0480
SHA512

5745cb6e179b42099c4b0b23ac193e6c33a06fd7692259721b3b96f5c0f690bf278caf99a1ab2500ff4d04a2cb9cde6c940c0821aebfac6c1bf11003c67818a3
SSDEEP

6144:X+ypfcZxVanYLd0VvenBzQmKdztKRE5HsUpApvmIPb/h2mwvuguYYqA/PW0dt:OypfcZxsnYLd7QNvxvIPkWguFqA/e0

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

e6b65bc8a3174f720511e71a8f4e2ce63e6e0d94a68204cba98853ac19fb0480
.exe windows x86

f67d1f0614eb91002e102431d1481d99

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadBitmapA
GetWindowRect
EnableWindow
EndDialog
PostMessageA
PostQuitMessage
ShowWindow
SetWindowPlacement
CreateWindowExA
DestroyWindow
GetWindowLongA
SetWindowLongA
SetFocus
InsertMenuItemA
GetClassInfoW
GetClassInfoA
DialogBoxParamW
DialogBoxParamA
GetWindowTextLengthW
GetWindowTextW
GetWindowTextLengthA
GetWindowTextA
SetWindowTextW
SetWindowTextA
CreateWindowExW
RegisterClassW
RegisterClassA
SendMessageW
LoadStringW
LoadStringA
AppendMenuW
SendMessageA
InsertMenuItemW
SetMenuItemInfoA
SetMenuItemInfoW
GetMenuItemInfoA
GetMenuItemInfoW
CharPrevA
SetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
CharLowerW
CharLowerA
CharUpperW
CharUpperA
CheckDlgButton
KillTimer
wsprintfA
SetDlgItemTextA
IsDlgButtonChecked
ClientToScreen
GetCursorPos
AppendMenuA
TrackPopupMenuEx
ScreenToClient
IsWindowEnabled
ChildWindowFromPointEx
WindowFromPoint
RegisterClipboardFormatA
SetWindowLongW
InvalidateRect
UpdateWindow
SetTimer
MapVirtualKeyA
CallWindowProcW
CallWindowProcA
GetParent
GetKeyState
GetSubMenu
CreatePopupMenu
RemoveMenu
CheckMenuRadioItem
CheckMenuItem
GetMenuItemCount
GetMenu
LoadMenuA
SetMenu
DrawMenuBar
DestroyMenu
GetDlgItem
MoveWindow
IsZoomed
GetClientRect
MessageBoxW
ReleaseCapture
SetCapture
GetCapture
DefWindowProcW
DefWindowProcA
LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
DispatchMessageA
LoadIconA
LoadCursorA
GetWindowPlacement

oleaut32

SysStringByteLen
VariantCopy
VariantClear
SysFreeString
SysAllocString

advapi32

GetUserNameW
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegEnumKeyExA
RegSetValueExA
RegSetValueExW
RegQueryValueExA
RegCreateKeyExA
RegQueryValueExW

shell32

SHChangeNotify
ShellExecuteExA
SHGetDesktopFolder
SHGetPathFromIDListA
SHBrowseForFolderA
SHFileOperationA
SHGetMalloc
SHGetFileInfoA
SHGetSpecialFolderLocation
ShellExecuteA

ole32

CoTaskMemAlloc
CoTaskMemFree
OleUninitialize
OleInitialize
RegisterDragDrop
RevokeDragDrop
DoDragDrop
CoUninitialize
CoInitialize
CoCreateInstance

comctl32

CreateStatusWindowW
ord17
InitCommonControlsEx
ImageList_GetImageCount
ImageList_AddMasked
ImageList_Create
ImageList_Destroy
PropertySheetW
PropertySheetA
CreateToolbarEx

mpr

WNetOpenEnumA
WNetCloseEnum
WNetEnumResourceA
WNetEnumResourceW
WNetGetResourceParentA
WNetGetResourceParentW
WNetGetResourceInformationA
WNetGetResourceInformationW
WNetAddConnection2A
WNetAddConnection2W
WNetOpenEnumW

gdi32

DeleteObject

comdlg32

GetOpenFileNameA
GetOpenFileNameW

msvcrt

wcscpy
__dllonexit
??1type_info@@UAE@XZ
_except_handler3
_beginthreadex
rand
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
?terminate@@YAXXZ
__CxxFrameHandler
_CxxThrowException
memcmp
_purecall
memset
memmove
memcpy
_wcsicmp
wcslen
malloc
free
srand
_onexit

kernel32

SetEndOfFile
WriteFile
SetFilePointer
GetFileSize
CreateFileA
GetLogicalDriveStringsW
GetLogicalDriveStringsA
FindFirstChangeNotificationW
FindFirstChangeNotificationA
FindCloseChangeNotification
FindNextFileW
FindNextFileA
FindFirstFileW
FindFirstFileA
FindClose
GetTempFileNameW
GetTempFileNameA
GetTempPathW
GetTempPathA
GetCurrentDirectoryW
GetFullPathNameW
GetFullPathNameA
DeleteFileW
DeleteFileA
CreateDirectoryW
CreateDirectoryA
MoveFileW
RemoveDirectoryW
SetFileAttributesW
MoveFileA
RemoveDirectoryA
SetFileAttributesA
SetLastError
CreateFileW
SetFileTime
GetWindowsDirectoryW
GetWindowsDirectoryA
ReadFile
GetDiskFreeSpaceA
FormatMessageW
FormatMessageA
LocalFree
GetModuleFileNameW
GetModuleFileNameA
LoadLibraryW
GetVolumeInformationA
LoadLibraryExA
WideCharToMultiByte
MultiByteToWideChar
GetCurrentProcess
SetPriorityClass
lstrcatA
lstrlenA
GetTickCount
FileTimeToLocalFileTime
WaitForMultipleObjects
Sleep
CreateProcessA
CreateProcessW
CloseHandle
CompareFileTime
GlobalAlloc
GlobalFree
GlobalSize
GlobalLock
GlobalUnlock
GetSystemDefaultLangID
GetUserDefaultLangID
AreFileApisANSI
GetModuleHandleW
GetModuleHandleA
CopyFileA
WaitForSingleObject
FindNextChangeNotification
GetCompressedFileSizeW
GetDriveTypeA
GetCommandLineW
GetVersionExA
LoadLibraryA
FileTimeToSystemTime
HeapFree
GetProcessHeap
HeapAlloc
FileTimeToDosDateTime
SystemTimeToFileTime
GetSystemTime
GetStdHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
FreeLibrary
GetProcAddress
DeleteCriticalSection
GetLastError
InterlockedDecrement
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
GetVolumeInformationW
CreateEventA
VirtualAlloc
VirtualFree
SetEvent
InitializeCriticalSection
GetStartupInfoA
DeviceIoControl

Sections

.text
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UPX0
Size: 108KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f67d1f0614eb91002e102431d1481d99

Headers

File Characteristics

Imports

user32

oleaut32

advapi32

shell32

ole32

comctl32

mpr

gdi32

comdlg32

msvcrt

kernel32

Sections

.text Size: 266KB - Virtual size: 266KB

.rdata Size: 59KB - Virtual size: 59KB

.data Size: 9KB - Virtual size: 18KB

.rsrc Size: 43KB - Virtual size: 42KB

.UPX0 Size: 108KB - Virtual size: 260KB

.text
Size: 266KB - Virtual size: 266KB

.rdata
Size: 59KB - Virtual size: 59KB

.data
Size: 9KB - Virtual size: 18KB

.rsrc
Size: 43KB - Virtual size: 42KB

.UPX0
Size: 108KB - Virtual size: 260KB