00e98f5fa5bead0211db77dd04c7371ad0fecb023f4f5fcfd8198af88350bcb3

General

Target

00e98f5fa5bead0211db77dd04c7371ad0fecb023f4f5fcfd8198af88350bcb3
Size

115KB
MD5

554a2e77a8ddca26942621b4735ec27e
SHA1

122828a1ff11a6be5850e3d304eeabbb639e28fb
SHA256

00e98f5fa5bead0211db77dd04c7371ad0fecb023f4f5fcfd8198af88350bcb3
SHA512

72a52ff143ba9caa3c0101f800f7d4fa3aa70e56610c3a7137d1060c25426f57f3b094004c48607045d15f26a434ab5658073a0c4a1060bf4a214676c0c55289
SSDEEP

3072:KobAyBlDs2xnNzBGfxjn2lIEll2LMlxk:zBL2hqI4l26xk

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

00e98f5fa5bead0211db77dd04c7371ad0fecb023f4f5fcfd8198af88350bcb3
.exe windows x86

8ae49c165bc7399cfc077136557ad29a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
GetVersionExW
TerminateProcess
GetCurrentProcess
SetEnvironmentVariableW
MultiByteToWideChar
HeapSetInformation
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter

msvcrt

__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
_adjust_fdiv
_controlfp
_stricmp
__getmainargs
_cexit
_except_handler4_common
_exit
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter

ole32

CoInitializeEx
CoRegisterSurrogateEx
CoUninitialize
CLSIDFromString

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 892B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 430B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.UPX0
Size: 108KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8ae49c165bc7399cfc077136557ad29a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

ole32

Sections

.text Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 892B

.rsrc Size: 1024B - Virtual size: 1000B

.reloc Size: 512B - Virtual size: 430B

.UPX0 Size: 108KB - Virtual size: 260KB

.text
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 892B

.rsrc
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 430B

.UPX0
Size: 108KB - Virtual size: 260KB