ca26682400bea2f51aefcb31fa56cb42783725b65a077db3929e6ab37d547e4a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca26682400bea2f51aefcb31fa56cb42783725b65a077db3929e6ab37d547e4a
Size

287KB
MD5

fb39810c150579e29ecdf0041f4e4431
SHA1

585c17c66dc9585d1f84313049a0312c8fed871c
SHA256

ca26682400bea2f51aefcb31fa56cb42783725b65a077db3929e6ab37d547e4a
SHA512

00ac2b651b6b29a77d4e05590b861e38d51261aaf2ab0dfe412d51234cf5d3d16b98057979e197d29ed026769a357c578bc1ac78c76cb884a7abebee14518573
SSDEEP

6144:2rCY7rRvy33oFK26wrVLl5mfyJFZD2qydJ8rNEyh7sT1mt+qRGmkNMI1JRZHVxyd:gC8y34Ft6wrVLeUFsqy+TRsT1moqEXJe

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/windows7序列号.exe	upx

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
static1/unpack002/out.upx	autoit_exe

Files

ca26682400bea2f51aefcb31fa56cb42783725b65a077db3929e6ab37d547e4a
.rar
logo.gif
.gif
windows7序列号.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 440KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 253KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 495KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
下载使用说明.txt