3dbe90f339d9adbb36f7ff731de2aa02c67ca7cd2fedcc1d7833dc4c45c8eeb7

Sharing

Copy URL Twitter E-mail

General

Target

3dbe90f339d9adbb36f7ff731de2aa02c67ca7cd2fedcc1d7833dc4c45c8eeb7
Size

250KB
MD5

764800fd36836e6caceb5c0b60c4f246
SHA1

5b423ca4080b2f85dee60bfb3e53dc75e6d83769
SHA256

3dbe90f339d9adbb36f7ff731de2aa02c67ca7cd2fedcc1d7833dc4c45c8eeb7
SHA512

4cea28c1a013bafb9796fe94501b5028160dbe1cecfe9fc99dcc3ad4d3b110044c52437248edad3efd51e5c70679b57cb42b696839196cf29dea3ecc2dc379a2
SSDEEP

1536:G1hdrYZP54ghmB6qAID8sq/2zX5h3rG3mE/OKzpRWDYsxJC+ut7MXs:G1H21gv/DFi2r5BtE/OKQdAi

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

3dbe90f339d9adbb36f7ff731de2aa02c67ca7cd2fedcc1d7833dc4c45c8eeb7
.exe windows x86

Code Sign

01:20:da:19:01:63:44:ed:d9
Certificate

Issuer

CN=Ascertia Public CA 1,O=Ascertia,C=GB

Not Before

02/01/2013, 21:43

Not After

01/02/2013, 21:43

Subject

CN=Microsoft Corporation,C=US,1.2.840.113549.1.9.1=#0c15636f6e74616374406d6963726f736f66742e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

e6
Certificate

Issuer

CN=Ascertia Root CA 2,O=Ascertia,C=GB

Not Before

21/04/2009, 12:15

Not After

14/04/2028, 23:59

Subject

CN=Ascertia Public CA 1,O=Ascertia,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

36:12:80:a6:ff:47:20:a4:27:7d:a9:34:45:bd:3e:63:9a:cf:36:9a
Signer

Actual PE Digest

36:12:80:a6:ff:47:20:a4:27:7d:a9:34:45:bd:3e:63:9a:cf:36:9a

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,C=US,1.2.840.113549.1.9.1=#0c15636f6e74616374406d6963726f736f66742e636f6d

20/10/2022, 18:39
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 124KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

01:20:da:19:01:63:44:ed:d9Certificate

Extended Key Usages

Key Usages

e6Certificate

Key Usages

36:12:80:a6:ff:47:20:a4:27:7d:a9:34:45:bd:3e:63:9a:cf:36:9aSigner

Signature Validations

Verification

20/10/2022, 18:39 Valid: false

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 124KB

UPX1 Size: 17KB - Virtual size: 20KB

.rsrc Size: 85KB - Virtual size: 88KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 22KB - Virtual size: 21KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 85KB - Virtual size: 85KB

.reloc Size: 3KB - Virtual size: 2KB

01:20:da:19:01:63:44:ed:d9
Certificate

e6
Certificate

36:12:80:a6:ff:47:20:a4:27:7d:a9:34:45:bd:3e:63:9a:cf:36:9a
Signer

20/10/2022, 18:39
Valid: false

UPX0
Size: - Virtual size: 124KB

UPX1
Size: 17KB - Virtual size: 20KB

.rsrc
Size: 85KB - Virtual size: 88KB

.text
Size: 22KB - Virtual size: 21KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 85KB - Virtual size: 85KB

.reloc
Size: 3KB - Virtual size: 2KB