54fe0ba0700da12faef908ac3817ff05b2f2b149d3ead7ae38faa0f946675bca

Sharing

Copy URL

Twitter E-mail

General

Target

54fe0ba0700da12faef908ac3817ff05b2f2b149d3ead7ae38faa0f946675bca
Size

342KB
MD5

52ec43b7a8e4f8987b4566aabf88a3d4
SHA1

e7ba650a0bfe02f87a1b759631dc339f9603f9bd
SHA256

54fe0ba0700da12faef908ac3817ff05b2f2b149d3ead7ae38faa0f946675bca
SHA512

3f7dd7af7b326212e18fbecf989a6c4427633567983889f4cedb5b1d83e9796d8350b2dc2f74d6f7b3496a7cf365aafd81d40626196e22363b81168c82883fe9
SSDEEP

6144:C+h3dNqRjDh4C6OT4vkVK0OLrSG6xXePt0l2sIR2O:COqzDxT4vA/HxXAsIk

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

54fe0ba0700da12faef908ac3817ff05b2f2b149d3ead7ae38faa0f946675bca
.exe windows x86

66608d159cb16d3473d37a1af2535d12

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryW
RaiseException
LocalFree
lstrlenW
HeapSetInformation
GetCurrentProcess
TerminateProcess
GetLastError
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
FreeLibrary
UnhandledExceptionFilter

user32

IsWindow
GetDesktopWindow
LoadStringW

msvcrt

_initterm
?terminate@@YAXXZ
_amsg_exit
??3@YAXPAX@Z
__set_app_type
__p__fmode
_adjust_fdiv
__setusermatherr
_controlfp
__p__commode
_except_handler4_common
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
wcstoul
memset

comctl32

PropertySheetW

ole32

CoCreateInstance
CoUninitialize
CoInitializeEx
FreePropVariantArray

oleaut32

SysFreeString
SysAllocString

shlwapi

ord158

sti

StiCreateInstanceW

shell32

CommandLineToArgvW

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

UPX0
Size: 144KB - Virtual size: 380KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

66608d159cb16d3473d37a1af2535d12

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcrt

comctl32

ole32

oleaut32

shlwapi

sti

shell32

Sections

.text Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 900B

.rsrc Size: 188KB - Virtual size: 188KB

.reloc Size: 1KB - Virtual size: 1KB

UPX0 Size: 144KB - Virtual size: 380KB

.text
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 900B

.rsrc
Size: 188KB - Virtual size: 188KB

.reloc
Size: 1KB - Virtual size: 1KB

UPX0
Size: 144KB - Virtual size: 380KB