f3f663ddf72793de3a6fd8479785e094754424f7ea5aa30b6d3ba3ae287a4de5

General

Target

f3f663ddf72793de3a6fd8479785e094754424f7ea5aa30b6d3ba3ae287a4de5
Size

6.7MB
MD5

fbc4e15e12288194e965a7064198d3d4
SHA1

fe3da128468cd9fd83360100ae61279330a78ff6
SHA256

f3f663ddf72793de3a6fd8479785e094754424f7ea5aa30b6d3ba3ae287a4de5
SHA512

4121699fc93764a0a143138813ca5e7705e7d05e71dbb23192917636c34b5180aa77caeba35b0c12bb99dfcdac79f61102f0fd7a04acb26d197292ecb20cf1ae
SSDEEP

196608:0cZzuGMRj2q4g67YFTZgplQlK+lgDr6rfj7J/XH:tZfMpN671LDr+XH

Score

9^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

f3f663ddf72793de3a6fd8479785e094754424f7ea5aa30b6d3ba3ae287a4de5
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Setup

Sections

UPX0
Size: - Virtual size: 10.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 6.7MB - Virtual size: 6.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 25KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 67B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 230KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.debug
Size: 10.6MB - Virtual size: 10.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 10.4MB

UPX1 Size: 6.7MB - Virtual size: 6.7MB

.rsrc Size: 7KB - Virtual size: 8KB

Headers

File Characteristics

Sections

.text Size: 2.6MB - Virtual size: 2.6MB

.itext Size: 9KB - Virtual size: 8KB

.data Size: 62KB - Virtual size: 61KB

.bss Size: - Virtual size: 25KB

.idata Size: 16KB - Virtual size: 16KB

.didata Size: 2KB - Virtual size: 2KB

.edata Size: 512B - Virtual size: 67B

.reloc Size: 230KB - Virtual size: 229KB

.rsrc Size: 3.4MB - Virtual size: 3.4MB

.debug Size: 10.6MB - Virtual size: 10.6MB

UPX0
Size: - Virtual size: 10.4MB

UPX1
Size: 6.7MB - Virtual size: 6.7MB

.rsrc
Size: 7KB - Virtual size: 8KB

.text
Size: 2.6MB - Virtual size: 2.6MB

.itext
Size: 9KB - Virtual size: 8KB

.data
Size: 62KB - Virtual size: 61KB

.bss
Size: - Virtual size: 25KB

.idata
Size: 16KB - Virtual size: 16KB

.didata
Size: 2KB - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 67B

.reloc
Size: 230KB - Virtual size: 229KB

.rsrc
Size: 3.4MB - Virtual size: 3.4MB

.debug
Size: 10.6MB - Virtual size: 10.6MB