ac64e601f458859e797ba0771b29786f23ebbf34bd6cc25c4b2252ae019b83b6

Sharing

Copy URL Twitter E-mail

General

Target

ac64e601f458859e797ba0771b29786f23ebbf34bd6cc25c4b2252ae019b83b6
Size

132KB
MD5

49df4f6ce54db5bf03ecabb9bbffa8d6
SHA1

1e559677536391a3be19bc66249d47bc2378ff26
SHA256

ac64e601f458859e797ba0771b29786f23ebbf34bd6cc25c4b2252ae019b83b6
SHA512

54b32c929326dde2de24720af55f525ef8de4527ba4a4fe735d7aa9581a8e5603ed62a6ba2b3a2ac34e489c976bd45a3da13fb0d20477f606994b2053fb4852b
SSDEEP

1536:KkCmFpaAT7mAusk35QSkqfhWv+dWDh2FnlRggl7n9QiciePnxrHGthnM0YCrAZNt:VpaQ7mAJU5gaF3t4jvCEMQT8zNSln

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

ac64e601f458859e797ba0771b29786f23ebbf34bd6cc25c4b2252ae019b83b6
.exe windows x86

f49f4c039114cf1df7b9aab6c1d1f871

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

time
_vsnwprintf
_wsplitpath
ctime
_c_exit
_exit
_XcptFilter
_cexit
exit
_wcmdln
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
??2@YAPAXI@Z
??3@YAXPAX@Z
div

advapi32

RegDeleteKeyW
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegCreateKeyW
RegOpenKeyExW
RegDeleteValueW

kernel32

TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
lstrcmpiW
GetCommandLineW
SetUnhandledExceptionFilter
GetModuleFileNameW
GetCurrentProcess
CloseHandle
CreateEventW
GetLastError
SetEvent
OpenEventW
lstrcatW
GetStartupInfoW
CreateProcessW
UnhandledExceptionFilter
lstrlenW
GetTickCount
GetModuleHandleW
QueryPerformanceCounter
lstrcpyW

gdi32

GetDeviceCaps

user32

MsgWaitForMultipleObjects
PeekMessageW
TranslateMessage
DispatchMessageW
LoadCursorW
RegisterClassW
CreateWindowExW
DefWindowProcW
PostQuitMessage
DialogBoxParamW
KillTimer
IsDlgButtonChecked
EndDialog
LoadStringW
SetDlgItemTextW
SendMessageW
wsprintfW
GetDlgItem
ShowWindow
PostMessageW
ReleaseDC
SetWindowPos
GetWindowRect
GetDC
EndPaint
DrawIcon
SetTimer
LoadIconW
BeginPaint
ScreenToClient

shell32

ShellExecuteW

rasapi32

RasEnumConnectionsW
RasGetConnectStatusW

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UPX0
Size: 108KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f49f4c039114cf1df7b9aab6c1d1f871

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

advapi32

kernel32

gdi32

user32

shell32

rasapi32

Sections

.text Size: 12KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 4KB - Virtual size: 3KB

.UPX0 Size: 108KB - Virtual size: 260KB

.text
Size: 12KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 4KB - Virtual size: 3KB

.UPX0
Size: 108KB - Virtual size: 260KB