718e69d3c06c8460465aacb794b77d0c5202fa1687241fc8e6449e6f857efcf0

Sharing

Copy URL Twitter E-mail

General

Target

718e69d3c06c8460465aacb794b77d0c5202fa1687241fc8e6449e6f857efcf0
Size

158KB
MD5

521772b8ee5335fedb05f8b9584c33bb
SHA1

7e8777923913457af487a09212459371c23ad152
SHA256

718e69d3c06c8460465aacb794b77d0c5202fa1687241fc8e6449e6f857efcf0
SHA512

ce15b0a9d50007407ecf9466d8031f3bce545985dd6fa17ffcdf7b500b447ccf09d39650fbe39ab3e5e7d5ea82dbd959b5b6647a1437951122d2af39135bf3f5
SSDEEP

3072:e51i3H9VDu2Qzytk9T6VtreauBvzivjGfAMkm4UG9ghWl14sPPHuNAtCA:W1i3X62GytE+VeD6y4pmlkXP2U

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

718e69d3c06c8460465aacb794b77d0c5202fa1687241fc8e6449e6f857efcf0
.exe windows x86

8864948b624a33b260714f546b0b4009

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateThread
DeleteFileA
ExitProcess
ExitThread
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTempFileNameA
GetTempPathA
GetVersionExA
LoadLibraryA
LoadLibraryExA
OpenProcess
WriteProcessMemory
VirtualAlloc
VirtualFree
WriteFile

Sections

UPX0
Size: - Virtual size: 292KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pebundle
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pebundle
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pe
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pebundle
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8864948b624a33b260714f546b0b4009

Headers

File Characteristics

Imports

kernel32

Sections

UPX0 Size: - Virtual size: 292KB

UPX1 Size: 84KB - Virtual size: 84KB

.rsrc Size: 26KB - Virtual size: 28KB

pebundle Size: 17KB - Virtual size: 20KB

pebundle Size: 8KB - Virtual size: 8KB

.pe Size: 1024B - Virtual size: 4KB

.text Size: 9KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 464B

pebundle Size: 8KB - Virtual size: 8KB

UPX0
Size: - Virtual size: 292KB

UPX1
Size: 84KB - Virtual size: 84KB

.rsrc
Size: 26KB - Virtual size: 28KB

pebundle
Size: 17KB - Virtual size: 20KB

pebundle
Size: 8KB - Virtual size: 8KB

.pe
Size: 1024B - Virtual size: 4KB

.text
Size: 9KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 464B

pebundle
Size: 8KB - Virtual size: 8KB