a94e208cacc4558fc62f08b3fecf06414c330be469da2638e15d7fe034dbc5cd

Sharing

Copy URL Twitter E-mail

General

Target

a94e208cacc4558fc62f08b3fecf06414c330be469da2638e15d7fe034dbc5cd
Size

145KB
MD5

923a7508d0dea32497b1a301a568c4b2
SHA1

f030dfc83cd06c319b85ba7217df69642a8e699e
SHA256

a94e208cacc4558fc62f08b3fecf06414c330be469da2638e15d7fe034dbc5cd
SHA512

05e4280c3c44b899e1fce08e39f30d3c0bdd46d411faa1ed9332ac93433f71a180d517ff7df1a08abc08003a41f885744fc28d2a17035110e539ea9e3cc224cd
SSDEEP

3072:qJN0U8Iz4ZIExSpUGWZmgO83zJ+O2Y9Aa6F2xnW+58/z5:qn0huWBGWZLO8Dx2LaW2x55E5

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

a94e208cacc4558fc62f08b3fecf06414c330be469da2638e15d7fe034dbc5cd
.exe windows x86

acc110ce2c6047559664b550ea7fec1d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
CreateMailslotW
CloseHandle
WriteFile
CreateFileW
GetComputerNameW
GetProcAddress
GetModuleHandleA
SetLastError
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
GetConsoleOutputCP
WideCharToMultiByte
QueryPerformanceCounter
GetModuleFileNameW
GetComputerNameExW
ExitProcess
GetSystemDirectoryW
LoadLibraryW
FreeLibrary
HeapReAlloc
HeapFree
SetConsoleMode
WriteConsoleW
ReadConsoleW
HeapSize
HeapAlloc
GetProcessHeap
HeapValidate
MultiByteToWideChar
CompareStringA
GetThreadLocale
CompareStringW
lstrlenW
lstrlenA
GetFileType
GetStdHandle
GetConsoleMode
VerSetConditionMask
VerifyVersionInfoW
FormatMessageW
LocalFree
GetLastError

msvcrt

_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
__winitenv
exit
_cexit
_XcptFilter
_exit
_c_exit
_errno
_get_osfhandle
_fileno
wcstod
wcstoul
wcstol
fflush
fprintf
wcstok
strtok
__CxxFrameHandler
_iob
_vsnwprintf
_controlfp

user32

CharUpperW
LoadStringW

netapi32

NetApiBufferFree
NetServerGetInfo

ws2_32

gethostbyaddr
inet_addr
WSAGetLastError
WSAStartup
WSACleanup

shlwapi

StrChrIW
StrStrW
StrStrIW
StrChrW

mpr

WNetCancelConnection2W
WNetGetLastErrorW
WNetAddConnection2W

secur32

GetUserNameExW

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UPX0
Size: 108KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

acc110ce2c6047559664b550ea7fec1d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

netapi32

ws2_32

shlwapi

mpr

secur32

version

Sections

.text Size: 26KB - Virtual size: 25KB

.data Size: 512B - Virtual size: 396B

.rsrc Size: 10KB - Virtual size: 9KB

.UPX0 Size: 108KB - Virtual size: 260KB

.text
Size: 26KB - Virtual size: 25KB

.data
Size: 512B - Virtual size: 396B

.rsrc
Size: 10KB - Virtual size: 9KB

.UPX0
Size: 108KB - Virtual size: 260KB