7fec6aff2f5345aa425912cf0a98d30e8bb3fa6d24d05484c4c8b8669cf6d34d

Sharing

Copy URL Twitter E-mail

General

Target

7fec6aff2f5345aa425912cf0a98d30e8bb3fa6d24d05484c4c8b8669cf6d34d
Size

165KB
MD5

84ae81cfae0c30bd1eca4755eb040fb9
SHA1

fc96b3771150309fbf5305cc8f8ddf49195386a7
SHA256

7fec6aff2f5345aa425912cf0a98d30e8bb3fa6d24d05484c4c8b8669cf6d34d
SHA512

50835e65f7dd4cdbabcd3ae84229c9a8aaa7a041e66ffdc1d0ba90328964dffdd9809b1043321c779b3e66fbe657107e287e2f3ae66ee198f1243895178293f1
SSDEEP

3072:7+M9adM2ABrgdwA9n0zeGSILXtoIisAQKorHIQ66RoC:CMoD4DDHiMqg

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

7fec6aff2f5345aa425912cf0a98d30e8bb3fa6d24d05484c4c8b8669cf6d34d
.exe windows x86

fd2d263b40d491db1e575cd0b430b472

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetSaveFileNameA
GetOpenFileNameA

shell32

ord189
ExtractAssociatedIconA
ord62
ShellExecuteExA
ord2
ord155
ord4
DragQueryFileA
DragFinish
DragAcceptFiles
ShellAboutA

olecli32

ord12
ord27
ord2
ord39
ord37
ord35
ord25
ord3
ord22
ord32
ord29
ord42
ord15
ord14
ord36
ord21
ord41
ord43
ord44
ord28
ord9
ord13
ord18
ord10
ord45
ord20
ord46
ord19
ord11
ord23
ord4
ord6
ord40
ord24

olesvr32

ord4
ord7
ord10
ord5
ord2
ord3
ord6
ord8

advapi32

RegOpenKeyExA
RegQueryValueExA
RegSetValueA
RegOpenKeyA
RegCloseKey
RegEnumKeyA
RegQueryValueA

wininet

DeleteUrlCacheEntry
CommitUrlCacheEntryA
CreateUrlCacheEntryA

shdocvw

ord229

msvcrt

_vsnprintf
memmove
strchr
_c_exit
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_controlfp
_except_handler3
__set_app_type

kernel32

lstrcmpA
WideCharToMultiByte
MultiByteToWideChar
GlobalDeleteAtom
FindClose
LocalAlloc
LocalLock
FindFirstFileA
LocalFree
GetSystemTime
SystemTimeToFileTime
GlobalHandle
_lwrite
Sleep
_lopen
_lread
AddAtomA
CreateThread
GetFileAttributesA
SetFileAttributesA
GetAtomNameA
DeleteAtom
DeleteFileA
WaitForSingleObject
CloseHandle
GetLastError
GlobalAlloc
lstrcpyA
GlobalReAlloc
lstrcatA
GetACP
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
LocalUnlock
GlobalAddAtomA
MulDiv
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetThreadLocale
GlobalFree
lstrcmpiA
GlobalLock
GlobalUnlock
OpenFile
_lcreat
_llseek
_lclose
GetProcAddress
lstrlenA

gdi32

CopyMetaFileA
CreateMetaFileA
SetWindowOrgEx
SetWindowExtEx
CloseMetaFile
SetTextColor
SetBkColor
SelectObject
PatBlt
GetStockObject
TranslateCharsetInfo
CreateFontIndirectA
GetTextExtentPoint32A
DeleteObject
GetDeviceCaps
GetLayout
SetLayout
SetBkMode
SetTextAlign
TextOutA

user32

IsWindowEnabled
GetDlgItem
GetKeyState
CharNextA
IsWindowVisible
DrawFocusRect
OffsetRect
PeekMessageA
EnumThreadWindows
SetFocus
IsRectEmpty
RegisterClipboardFormatA
SetRectEmpty
DrawIcon
GetMenu
SendDlgItemMessageA
GetDlgItemTextA
CreateWindowExA
CheckDlgButton
DestroyIcon
CharUpperBuffA
CharLowerA
ScrollWindow
BringWindowToTop
UpdateWindow
ReleaseDC
GetDC
GetSysColor
LoadStringA
LoadCursorA
GetSysColorBrush
LoadAcceleratorsA
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
SendMessageA
ShowWindow
GetTopWindow
GetSystemMetrics
MessageBoxA
DialogBoxParamA
IsWindow
GetClientRect
SetDlgItemTextA
EndDialog
SetWindowTextA
EnableMenuItem
DestroyMenu
InsertMenuA
CreatePopupMenu
DeleteMenu
IsClipboardFormatAvailable
GetSubMenu
PostQuitMessage
LoadIconA
InvalidateRect
CloseClipboard
GetClipboardData
OpenClipboard
PostMessageA
DefWindowProcA
RegisterClassA
DestroyWindow
EnableScrollBar
EnableWindow
CheckRadioButton
SetScrollPos
GetScrollPos
IsDlgButtonChecked
SetWindowPos
GetWindowDC
SetClipboardData
EmptyClipboard
SystemParametersInfoA
EndPaint
FillRect
SetRect
BeginPaint
ReleaseCapture
ScreenToClient
SetCursor
SetCapture
IsIconic
DrawTextA
GetScrollRange

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UPX0
Size: 108KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fd2d263b40d491db1e575cd0b430b472

Headers

DLL Characteristics

File Characteristics

Imports

comdlg32

shell32

olecli32

olesvr32

advapi32

wininet

shdocvw

msvcrt

kernel32

gdi32

user32

Sections

.text Size: 44KB - Virtual size: 43KB

.data Size: 512B - Virtual size: 4KB

.rsrc Size: 11KB - Virtual size: 11KB

.UPX0 Size: 108KB - Virtual size: 260KB

.text
Size: 44KB - Virtual size: 43KB

.data
Size: 512B - Virtual size: 4KB

.rsrc
Size: 11KB - Virtual size: 11KB

.UPX0
Size: 108KB - Virtual size: 260KB