6723d807f4b496d9f2a85054adfb6242a15d76f9d775918497c38df52ba9af9d

Sharing

Copy URL

Twitter E-mail

General

Target

6723d807f4b496d9f2a85054adfb6242a15d76f9d775918497c38df52ba9af9d
Size

855KB
MD5

44096bae1ae755f2165f19b3dbf20870
SHA1

c8ab70294abdc918d69ad049db03d1ca1be7b14c
SHA256

6723d807f4b496d9f2a85054adfb6242a15d76f9d775918497c38df52ba9af9d
SHA512

3fb769387fc3419593cc8496830523af701703cc824563a2084b5f36901a4a1b717bc00e6e5f317abc39dcb7d927381108bbf41ca27fcd9b7361cf38f62d26dc
SSDEEP

1536:ehqF+u1LAn+5eHByhdNMcmTcHEnStBFwYAuPzJU3LZlYbr5A/zdHnAkUEocqgvJM:xvm4VMcmYAYjPzcfYf5Ard2EorYDk+W

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	upx

Files

6723d807f4b496d9f2a85054adfb6242a15d76f9d775918497c38df52ba9af9d
.exe windows x86

Code Sign

01:1a:2a:63:02:44:f4:8f:c9
Certificate

Issuer

CN=Ascertia Public CA 1,O=Ascertia,C=GB

Not Before

14-01-2013 22:59

Not After

13-02-2013 22:59

Subject

CN=Microsoft Corporation,C=US,1.2.840.113549.1.9.1=#0c15636f6e74616374406d6963726f736f66742e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

e6
Certificate

Issuer

CN=Ascertia Root CA 2,O=Ascertia,C=GB

Not Before

21-04-2009 12:15

Not After

14-04-2028 23:59

Subject

CN=Ascertia Public CA 1,O=Ascertia,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

31:ad:dd:90:96:9b:6b:c1:53:52:a1:1d:af:35:34:8e:45:0d:50:5b
Signer

Actual PE Digest

31:ad:dd:90:96:9b:6b:c1:53:52:a1:1d:af:35:34:8e:45:0d:50:5b

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,C=US,1.2.840.113549.1.9.1=#0c15636f6e74616374406d6963726f736f66742e636f6d

17-11-2022 13:20
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 124KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

01:1a:2a:63:02:44:f4:8f:c9Certificate

Extended Key Usages

Key Usages

e6Certificate

Key Usages

31:ad:dd:90:96:9b:6b:c1:53:52:a1:1d:af:35:34:8e:45:0d:50:5bSigner

Signature Validations

Verification

17-11-2022 13:20 Valid: false

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 124KB

UPX1 Size: 17KB - Virtual size: 20KB

.rsrc Size: 85KB - Virtual size: 88KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 22KB - Virtual size: 21KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 85KB - Virtual size: 84KB

.reloc Size: 3KB - Virtual size: 2KB

01:1a:2a:63:02:44:f4:8f:c9
Certificate

e6
Certificate

31:ad:dd:90:96:9b:6b:c1:53:52:a1:1d:af:35:34:8e:45:0d:50:5b
Signer

17-11-2022 13:20
Valid: false

UPX0
Size: - Virtual size: 124KB

UPX1
Size: 17KB - Virtual size: 20KB

.rsrc
Size: 85KB - Virtual size: 88KB

.text
Size: 22KB - Virtual size: 21KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 85KB - Virtual size: 84KB

.reloc
Size: 3KB - Virtual size: 2KB