2691c4db3d0d41b30c2e6c30d6f99b0694fce036787fc73d8bb8c5912369763b

Sharing

Copy URL Twitter E-mail

General

Target

2691c4db3d0d41b30c2e6c30d6f99b0694fce036787fc73d8bb8c5912369763b
Size

1.1MB
MD5

0dd8adb02e6fa925a0d74c65880c3e83
SHA1

117bc331ae37774c5980855d447fde2a5c8f23b9
SHA256

2691c4db3d0d41b30c2e6c30d6f99b0694fce036787fc73d8bb8c5912369763b
SHA512

fabfbdbacf4f310dd4cd890d3e59ffce50bbfadaab88d8db18355944e86f70f9b009fbb20471884ff031e837cefe8d940571e1e0bbc60dfc0129377f83ca39c7
SSDEEP

24576:WKG+6WC0IBOw0DW/yvZnCQYuGJWcMMMMMMcumHd:novBOrRnCQYZMMMMMM0

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

2691c4db3d0d41b30c2e6c30d6f99b0694fce036787fc73d8bb8c5912369763b
.exe windows x86

928f8b6a5c6c6b935f97fdbacd39dcc2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17
ord8
ord6
ImageList_ReplaceIcon
ImageList_Create
ImageList_Destroy
ImageList_Remove
ImageList_AddMasked
ImageList_Add
PropertySheetA

kernel32

CreateFileA
ReadFile
GetStdHandle
WriteFile
GetDiskFreeSpaceA
GetFileAttributesW
SetFileAttributesW
GetFullPathNameA
GetFullPathNameW
MoveFileW
DeleteFileW
RemoveDirectoryA
RemoveDirectoryW
DeviceIoControl
CreateDirectoryA
CreateDirectoryW
ExpandEnvironmentStringsW
FindNextFileW
FindFirstFileW
MultiByteToWideChar
CompareFileTime
FindCloseChangeNotification
lstrcmpiA
FindFirstChangeNotificationA
SetCurrentDirectoryW
GetLocaleInfoA
GetNumberFormatA
CreateThread
ExitThread
GetProcessAffinityMask
SetEvent
ResetEvent
WaitForMultipleObjects
CreateEventA
GetCompressedFileSizeA
FindResourceA
SizeofResource
LoadResource
LoadLibraryExA
UpdateResourceA
EnumResourceLanguagesA
EndUpdateResourceA
EnumResourceNamesA
BeginUpdateResourceA
CompareStringA
SetThreadPriority
GetCurrentThread
SetPriorityClass
SetCurrentDirectoryA
CompareStringW
IsDBCSLeadByte
GetCPInfo
GlobalMemoryStatus
GetLogicalDrives
lstrlenA
ResumeThread
SuspendThread
GetSystemTimeAsFileTime
GetCurrentThreadId
GetFileType
GetThreadPriority
GetPriorityClass
WritePrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
SetErrorMode
GetCommandLineW
GetCurrentProcessId
MulDiv
GetProfileStringA
FindNextChangeNotification
SetEnvironmentVariableA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetStringTypeW
GetStringTypeA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
InitializeCriticalSectionAndSpinCount
GetVersion
HeapSize
SetHandleCount
GetConsoleMode
GetConsoleCP
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
ExitProcess
GetModuleHandleW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
VirtualAlloc
DeleteCriticalSection
VirtualFree
HeapCreate
GetStartupInfoA
GetCommandLineA
LeaveCriticalSection
EnterCriticalSection
SetStdHandle
RaiseException
RtlUnwind
HeapAlloc
HeapReAlloc
HeapFree
GetFileTime
SetFilePointer
FlushFileBuffers
SetEndOfFile
SetFileTime
BackupSeek
BackupRead
CreateFileW
GetCurrentProcess
SetLastError
FormatMessageA
LocalFree
WideCharToMultiByte
GetLogicalDriveStringsA
CreateMutexA
ReleaseMutex
GetLastError
GlobalSize
GetProcessHeap
GlobalAlloc
GlobalLock
GlobalUnlock
lstrcpyA
GlobalFree
GetModuleHandleA
GetVersionExA
GetTickCount
GetSystemTime
SystemTimeToFileTime
CreateFileMappingA
WaitForSingleObject
OpenFileMappingA
MapViewOfFile
CloseHandle
UnmapViewOfFile
GetCurrentDirectoryW
GetModuleFileNameA
FindNextFileA
MoveFileA
LoadLibraryA
GetProcAddress
FreeLibrary
LocalFileTimeToFileTime
CopyFileA
Sleep
GetTempPathA
ExpandEnvironmentStringsA
GetDriveTypeA
FileTimeToDosDateTime
SetFileAttributesA
DeleteFileA
FindFirstFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetTimeFormatA
GetDateFormatA
FindClose
DosDateTimeToFileTime
GetFileAttributesA
GetCurrentDirectoryA
GetLocalTime

user32

CreateDialogParamA
PostThreadMessageA
CharToOemBuffA
IsChild
GetLastActivePopup
GetClipboardData
GetMenuItemID
PostQuitMessage
InsertMenuA
LoadMenuA
RegisterClassA
LoadAcceleratorsA
FindWindowA
GetMenuState
SetDlgItemTextW
TranslateAcceleratorA
IsDialogMessageA
SetPropA
RegisterWindowMessageA
SetMenu
EnumWindows
FindWindowExA
CreateIcon
SetWindowTextW
GetWindowTextW
FlashWindow
CharUpperW
ValidateRect
GetSysColor
CopyImage
FillRect
ExitWindowsEx
RedrawWindow
DrawIconEx
LoadStringA
GetWindow
SetScrollPos
IsCharUpperW
IsCharAlphaW
CharLowerW
IsCharUpperA
IsCharAlphaA
CharLowerA
OpenClipboard
EmptyClipboard
SetClipboardData
CharToOemA
CloseClipboard
MessageBeep
PeekMessageA
GetFocus
SetForegroundWindow
CopyIcon
EnableMenuItem
MoveWindow
CheckMenuItem
LoadBitmapA
LoadImageA
MapWindowPoints
SetTimer
KillTimer
UpdateWindow
CharUpperA
GetClientRect
BeginPaint
EndPaint
SetWindowTextA
IsWindow
GetWindowTextLengthA
AppendMenuA
AppendMenuW
DrawMenuBar
GetMenu
GetSubMenu
DeleteMenu
ScrollWindowEx
LoadIconA
SetScrollRange
GetDialogBaseUnits
PtInRect
SendMessageW
CreateDialogIndirectParamA
GetPropA
RemovePropA
GetSystemMenu
BringWindowToTop
SetWindowPlacement
GetMessageA
TranslateMessage
DispatchMessageA
GetIconInfo
SetMenuItemInfoA
CreateIconIndirect
SendMessageA
SetFocus
SetWindowPos
CreateWindowExA
DestroyWindow
GetWindowTextA
GetMenuItemCount
GetMenuItemInfoA
ScreenToClient
ClientToScreen
CreatePopupMenu
SetWindowLongA
TrackPopupMenu
DestroyMenu
CallWindowProcA
RegisterClipboardFormatA
GetKeyState
LoadCursorA
SetCursor
WindowFromPoint
GetWindowThreadProcessId
InvalidateRect
GetDC
ReleaseDC
GetDesktopWindow
GetCursorPos
GetWindowLongA
ShowWindow
EnableWindow
IntersectRect
IsIconic
GetWindowPlacement
GetSystemMetrics
IsWindowEnabled
SetDlgItemInt
GetDlgItemInt
IsDlgButtonChecked
PostMessageA
EnumChildWindows
GetDlgItem
GetWindowRect
GetClassNameA
GetParent
CheckDlgButton
MessageBoxA
IsWindowVisible
OemToCharBuffA
DialogBoxParamA
SendDlgItemMessageA
DestroyIcon
GetDlgItemTextA
SetDlgItemTextA
EndDialog
OemToCharA
DefWindowProcA
InsertMenuItemA

gdi32

GetDeviceCaps
LineTo
MoveToEx
DPtoLP
SetPixel
CreatePatternBrush
GetTextExtentPoint32A
GetMapMode
SetMapMode
CreateCompatibleBitmap
Rectangle
StretchBlt
SetBkColor
BitBlt
GetObjectA
CreateCompatibleDC
GetPixel
DeleteDC
ExtTextOutA
TextOutA
CreatePen
CreateSolidBrush
SetTextColor
Polygon
Polyline
SelectObject
GetTextFaceA
GetTextMetricsA
CreateFontA
CreateBitmap
DeleteObject

comdlg32

GetOpenFileNameW
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
ChooseFontA

advapi32

LookupPrivilegeValueA
OpenProcessToken
SetFileSecurityA
SetFileSecurityW
GetSecurityDescriptorLength
GetFileSecurityA
GetFileSecurityW
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegEnumValueA
RegQueryValueExW
RegSetValueExW
RegSetValueExA
RegCreateKeyExA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
AdjustTokenPrivileges

shell32

DragFinish
DragQueryFileA
DragQueryFileW
DragAcceptFiles
Shell_NotifyIconA
ShellExecuteA
ExtractIconExA
SHFileOperationA
ShellExecuteExA
SHGetMalloc
SHBrowseForFolderA
SHChangeNotify
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetFileInfoA
FindExecutableA

ole32

OleInitialize
CoCreateInstance
OleSetClipboard
DoDragDrop
OleUninitialize

Sections

.text
Size: 703KB - Virtual size: 702KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 274KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.UPX0
Size: 108KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

928f8b6a5c6c6b935f97fdbacd39dcc2

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

Sections

.text Size: 703KB - Virtual size: 702KB

.rdata Size: 51KB - Virtual size: 50KB

.data Size: 13KB - Virtual size: 274KB

.rsrc Size: 200KB - Virtual size: 199KB

.reloc Size: 46KB - Virtual size: 46KB

.UPX0 Size: 108KB - Virtual size: 260KB

.text
Size: 703KB - Virtual size: 702KB

.rdata
Size: 51KB - Virtual size: 50KB

.data
Size: 13KB - Virtual size: 274KB

.rsrc
Size: 200KB - Virtual size: 199KB

.reloc
Size: 46KB - Virtual size: 46KB

.UPX0
Size: 108KB - Virtual size: 260KB