10a3571ff372a5c33dcdef305a49ffaab9ae17e7f58790f278a53b0b9b875157

Sharing

Copy URL

Twitter E-mail

General

Target

10a3571ff372a5c33dcdef305a49ffaab9ae17e7f58790f278a53b0b9b875157
Size

320KB
MD5

5319dc26e42296d4c9c2b9d9857ce1c0
SHA1

d53d99ca60cdc19b952a1609aceb7e224bd27ff5
SHA256

10a3571ff372a5c33dcdef305a49ffaab9ae17e7f58790f278a53b0b9b875157
SHA512

33989cb2bd5ef4a7e9e83f29d895133177b3edd6ff47c12deb59dc9162d3d1bb63f3baebc07a17d94765194e7db636cba2afae1be17666511b72d93303152300
SSDEEP

6144:WSWclRDvO4SIA1AT+UBiPVCi55bdbP9GwCUKMCux:WSzbDvJAmTs9C+hGaCk

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	upx

Files

10a3571ff372a5c33dcdef305a49ffaab9ae17e7f58790f278a53b0b9b875157
.exe windows x86

4160b5b53f9e62cbcd993f229c2ba1bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

glVertexPointer
glTexImage2D
glTexParameteri
glDrawBuffer
wglGetProcAddress
glGenTextures
wglCreateContext
glEnableClientState
glClear
glClearColor
glScaled
glVertex3i
glTexCoord2f
glEnd
glDisable
glTranslated
glMultMatrixd
glDrawElements
glLoadIdentity
wglDeleteContext
glHint
glEnable
glLightfv
glTexCoordPointer
glBindTexture
glViewport
glMatrixMode
glBlendFunc
glPushMatrix
glReadBuffer
glReadPixels
glPopMatrix
wglMakeCurrent
glColorPointer
glShadeModel
glBegin

kernel32

SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LCMapStringW
LCMapStringA
GetSystemInfo
VirtualProtect
LoadLibraryA
GetOEMCP
GetACP
GetLocaleInfoA
GetCPInfo
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
SetStdHandle
FlushFileBuffers
GetCurrentProcessId
VirtualQuery
InterlockedExchange
RtlUnwind
GetEnvironmentStringsW
GetTickCount
GetModuleHandleA
QueryPerformanceCounter
QueryPerformanceFrequency
MapViewOfFile
UnmapViewOfFile
Sleep
CreateFileMappingA
SetConsoleCtrlHandler
CloseHandle
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
SetLastError
TlsAlloc
WriteFile
RaiseException
IsBadReadPtr
InitializeCriticalSection
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
IsBadCodePtr
ExitProcess
GetProcAddress
GetCommandLineA
GetVersionExA
GetProcessHeap
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
GetLastError
SetFilePointer

user32

RegisterClassA
EnumDisplayDevicesA
LoadCursorA
DefWindowProcA
CreateWindowExA
GetDC
GetMonitorInfoA
LoadIconA
PostQuitMessage
EnumDisplayMonitors
DestroyWindow
DispatchMessageA
PeekMessageA
TranslateMessage

gdi32

SetPixelFormat
GetStockObject
ChoosePixelFormat

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UPX
Size: 240KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4160b5b53f9e62cbcd993f229c2ba1bb

Headers

File Characteristics

Imports

opengl32

kernel32

user32

gdi32

Sections

.text Size: 52KB - Virtual size: 48KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 8KB - Virtual size: 27KB

.rsrc Size: 4KB - Virtual size: 1KB

.UPX Size: 240KB - Virtual size: 240KB

.text
Size: 52KB - Virtual size: 48KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 8KB - Virtual size: 27KB

.rsrc
Size: 4KB - Virtual size: 1KB

.UPX
Size: 240KB - Virtual size: 240KB