bce666456f777f78ef7f2e0651a6b079285d091a3cec8a2a0a48ad168edf1d04

Sharing

Copy URL

Twitter E-mail

General

Target

bce666456f777f78ef7f2e0651a6b079285d091a3cec8a2a0a48ad168edf1d04
Size

172KB
MD5

82c34811d11ba2137347de19c46abe28
SHA1

25573236a8ae8ca19451e670493afb985fd053fe
SHA256

bce666456f777f78ef7f2e0651a6b079285d091a3cec8a2a0a48ad168edf1d04
SHA512

75d8fd47b4ef342826ec9bf9c79c71ec52b7ab38e067c222a9ab0d46022efb1cb1a5d84682fd2e5e4768d86a26e5d368dc664ab7ef9c08ef710d94d434d51ed9
SSDEEP

3072:bEyxSdsgKO7xjhglgfnqc5f/3OWUtwNux9n4EBU3/WmzzUJVTZosxtdZV4K8VkDw:TxisFO7NpfPi4kIWyQ1tilcUR

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

bce666456f777f78ef7f2e0651a6b079285d091a3cec8a2a0a48ad168edf1d04
.exe windows x86

fbaf7364483015f48259eb7b1ff29968

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

libidl-0.6

IDL_tree_walk_in_order
IDL_ident_new
IDL_param_dcl_new
IDL_tree_warning
IDL_check_type_cast
IDL_tree_property_get
IDL_tree_error
IDL_tree_to_IDL
IDL_parse_filename_with_input
IDL_ns_free
IDL_tree_free
IDL_inhibit_pop
IDL_inhibit_push
IDL_file_set
IDL_queue_new_ident_comment
IDL_file_get

glib-1.2

g_hash_table_foreach_remove
g_hash_table_size
g_hash_table_remove
g_basename
g_slist_length
g_slist_nth_data
g_str_equal
g_str_hash
g_hash_table_new
g_strdup
g_strerror
g_hash_table_foreach
g_hash_table_destroy
g_slist_foreach
g_slist_append
g_hash_table_lookup
g_hash_table_insert
g_strdup_printf
g_free
g_logv

msvcr70

_unlink
strstr
_except_handler3
_controlfp
_onexit
__dllonexit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
__p___initenv
_cexit
_XcptFilter
_exit
_c_exit
strchr
tolower
time
ctime
qsort
memset
calloc
strcpy
strcat
memmove
toupper
fputc
strlen
sscanf
sprintf
malloc
exit
strcmp
fprintf
_iob
fputs
fopen
fclose
fread
realloc
_strdup
strncmp
fwrite
memcpy
free
perror
_errno
strrchr

kernel32

GetModuleHandleA

Exports

Exports

XPT_ArenaFree
XPT_ArenaMalloc
XPT_ArenaStrDup
XPT_DataOffset
XPT_DestroyArena
XPT_DestroyInterfaceDirectoryEntry
XPT_DestroyXDRState
XPT_Do16
XPT_Do32
XPT_Do64
XPT_Do8
XPT_DoCString
XPT_DoHeader
XPT_DoHeaderPrologue
XPT_DoIID
XPT_DoString
XPT_DoStringInline
XPT_DumpStats
XPT_FillInterfaceDirectoryEntry
XPT_FillMethodDescriptor
XPT_FillParamDescriptor
XPT_FreeHeader
XPT_FreeInterfaceDescriptor
XPT_GetAddrForOffset
XPT_GetInterfaceIndexByName
XPT_GetOffsetForAddr
XPT_GetXDRData
XPT_GetXDRDataLength
XPT_InterfaceDescriptorAddConsts
XPT_InterfaceDescriptorAddMethods
XPT_InterfaceDescriptorAddTypes
XPT_MakeCursor
XPT_NewAnnotation
XPT_NewArena
XPT_NewHeader
XPT_NewInterfaceDescriptor
XPT_NewString
XPT_NewStringZ
XPT_NewXDRState
XPT_NotifyDoneLoading
XPT_ParseVersionString
XPT_SeekTo
XPT_SetAddrForOffset
XPT_SetDataOffset
XPT_SetOffsetForAddr
XPT_SizeOfHeader
XPT_SizeOfHeaderBlock

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UPX0
Size: 108KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fbaf7364483015f48259eb7b1ff29968

Headers

File Characteristics

Imports

libidl-0.6

glib-1.2

msvcr70

kernel32

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 34KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 904B

.UPX0 Size: 108KB - Virtual size: 260KB

.text
Size: 36KB - Virtual size: 34KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 904B

.UPX0
Size: 108KB - Virtual size: 260KB