dda2c9986da7636c08100211432d523e85316a6f761c35092aa19ad93ba129e7

General

Target

dda2c9986da7636c08100211432d523e85316a6f761c35092aa19ad93ba129e7
Size

124KB
MD5

03a57f2c3e127e678e3a5b8342c1bf89
SHA1

a419c1d403fe513026c0ebf62482e3ade915d7ec
SHA256

dda2c9986da7636c08100211432d523e85316a6f761c35092aa19ad93ba129e7
SHA512

08a584d40765c48d7ba2b091fc2a6a4ff2ef6aa9c0a0fd42db88ccfaf20f86901d25f09283c1796152310a6a3b4de3de00c5032615fe9b09bcc4955fa8b4604a
SSDEEP

1536:QF1COqRVsdEkQIMFVKI3P4dNdBXuLgkLP/+350p59neHVcwyCHKvH19fXjG:rOqRqd/QISKI3P4ZELPC5y5ReMWQrfT

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

dda2c9986da7636c08100211432d523e85316a6f761c35092aa19ad93ba129e7
.exe windows x86

fee55fa82e7674535a3fcdb48ab52a8b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileType
GetStdHandle
FormatMessageW
GetVersionExW
SetThreadAffinityMask
GetCurrentThread
GetProcessAffinityMask
GetCurrentProcess
GetProcAddress
GetConsoleMode
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
SetUnhandledExceptionFilter
WriteConsoleW
GetConsoleOutputCP
WideCharToMultiByte
SetThreadUILanguage
GetModuleHandleA
WriteFile

msvcrt

_c_exit
_exit
_XcptFilter
_cexit
__initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
setlocale
printf
wcslen
malloc
free
exit

advapi32

RegSetValueExW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UPX0
Size: 108KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fee55fa82e7674535a3fcdb48ab52a8b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

advapi32

Sections

.text Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 108B

.rsrc Size: 10KB - Virtual size: 9KB

.UPX0 Size: 108KB - Virtual size: 260KB

.text
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 108B

.rsrc
Size: 10KB - Virtual size: 9KB

.UPX0
Size: 108KB - Virtual size: 260KB