23ca0dada85d3d13236d258de79bb318d6a6b55c1fe50bb7765ac49ddab2dc2f

General

Target

23ca0dada85d3d13236d258de79bb318d6a6b55c1fe50bb7765ac49ddab2dc2f
Size

117KB
MD5

0e1e3eb128c89c0e2b401030076c6174
SHA1

4c5c5854cf3ea3dabcb3423dc6e048e9f6173c1a
SHA256

23ca0dada85d3d13236d258de79bb318d6a6b55c1fe50bb7765ac49ddab2dc2f
SHA512

89158303d4655701eb4a1c4f0f410686e5584601444941b3c473b4dfaa65c3f03a80c4cdfe99216edfab0583cb56139e88f2f9013dc06e7670aca17aa2234964
SSDEEP

3072:OP0AKBpBBp11vvAKqw04nLq0X96S6vDn:OBMjHvAKqgnLq0tl6

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

23ca0dada85d3d13236d258de79bb318d6a6b55c1fe50bb7765ac49ddab2dc2f
.exe windows x86

8b153c5ae84ab971519251d7a2671a0d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
OpenFile
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
_lclose
FormatMessageA
LocalFree
GetFileSize
GetComputerNameA
_lread
GetSystemTimeAsFileTime
GetTickCount

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__commode
_adjust_fdiv
__setusermatherr
__getmainargs
__initenv
exit
_cexit
_XcptFilter
_exit
_write
_initterm
_c_exit
__p__fmode

advapi32

RegCloseKey
GetUserNameA
RegCreateKeyA
RegQueryValueExA
RegSetValueExA

lprhelp

StartJob
WriteJobData
EndJob
CloseLPR
CancelJob
OpenLPR
InitiateConnection

user32

CharToOemBuffA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UPX0
Size: 108KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8b153c5ae84ab971519251d7a2671a0d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

advapi32

lprhelp

user32

Sections

.text Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 4KB

.rsrc Size: 3KB - Virtual size: 3KB

.UPX0 Size: 108KB - Virtual size: 260KB

.text
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 4KB

.rsrc
Size: 3KB - Virtual size: 3KB

.UPX0
Size: 108KB - Virtual size: 260KB