1f30793a4dee36471ca7a0392b7f2a00895fb4e0560c937ce2ca95c47ed7f10e

Sharing

Copy URL Twitter E-mail

General

Target

1f30793a4dee36471ca7a0392b7f2a00895fb4e0560c937ce2ca95c47ed7f10e
Size

616KB
MD5

f5ccdea11d17fae71feb0797822254dc
SHA1

59b01cad7b38a11d4d87ae387730d6aca47f21f1
SHA256

1f30793a4dee36471ca7a0392b7f2a00895fb4e0560c937ce2ca95c47ed7f10e
SHA512

7c258017bf0ec663820b1da2096fb2f345422e7623b1263ddb0eba830ad8daa13202ffcca679947284edd21e5175c50d63cc505ee3d7bf78ebe8b79a8044cae6
SSDEEP

12288:8dY5G+R0AGOXhLBO0xyUGbPTfhx75m9eC5+kkXPEIBN+sUCLI:sYAM0AZXhLcKGhx7cem+k+8qZB

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

1f30793a4dee36471ca7a0392b7f2a00895fb4e0560c937ce2ca95c47ed7f10e
.exe windows x86

6f82f68af00bc7df72b286fe1d3c389e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegNotifyChangeKeyValue
RegEnumKeyExW
RegEnumKeyExA
RegQueryValueExW
RegQueryValueExA
RegSetValueExW
RegSetValueExA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegOpenKeyExW
RegOpenKeyExA
RegDeleteValueW
RegDeleteValueA
RegDeleteKeyW
RegDeleteKeyA
RegEnumValueW
RegEnumValueA
RegCreateKeyExW
RegCreateKeyExA

kernel32

WriteFile
SetFilePointer
GetThreadLocale
CreateThread
SetErrorMode
RemoveDirectoryW
RemoveDirectoryA
OpenEventW
OpenEventA
LockResource
InterlockedExchange
RaiseException
ReadFile
ResetEvent
GetStartupInfoA
GetShortPathNameW
GetNumberFormatW
GetNumberFormatA
GetLogicalDriveStringsW
GetLogicalDriveStringsA
GetDriveTypeW
GetDriveTypeA
CreateProcessW
CreateProcessA
CreateMutexW
CreateMutexA
GetShortPathNameA
GlobalFree
GetLocaleInfoW
GetLocaleInfoA
CreateFileMappingW
CreateFileMappingA
GetVersionExW
IsBadWritePtr
IsBadReadPtr
MoveFileW
MoveFileA
SetLastError
lstrcpyW
lstrcmpiW
lstrcatW
LoadLibraryExW
LoadLibraryExA
LoadLibraryW
LoadLibraryA
GetTempPathW
GetTempPathA
GetTempFileNameW
GetTempFileNameA
lstrcpynW
GetModuleHandleW
GetModuleHandleA
GetUserDefaultUILanguage
FindClose
FindCloseChangeNotification
FindNextChangeNotification
GetCurrentThread
SetThreadPriority
GlobalAlloc
HeapDestroy
SetUnhandledExceptionFilter
GetCommandLineW
DuplicateHandle
WaitForSingleObject
SetEvent
ReleaseMutex
LoadResource
SizeofResource
FlushInstructionCache
HeapAlloc
GetTickCount
lstrlenA
GetFileSize
MapViewOfFile
UnmapViewOfFile
CloseHandle
GetCurrentProcess
GlobalLock
GlobalUnlock
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcessId
InitializeCriticalSection
DeleteCriticalSection
InterlockedDecrement
GetLastError
InterlockedIncrement
GetCurrentThreadId
FreeLibrary
GetProcAddress
GetProcessHeap
HeapFree
Sleep
GetVersionExA
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
lstrcmpiA
CreateDirectoryA
CreateDirectoryW
CreateEventA
CreateEventW
CreateFileA
CreateFileW
DeleteFileA
DeleteFileW
FindFirstChangeNotificationA
FindFirstChangeNotificationW
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FindResourceA
FindResourceW
LocalFree
LocalAlloc
FormatMessageA
FormatMessageW
GetFileAttributesA
GetFileAttributesW
GetModuleFileNameA
GetModuleFileNameW

gdi32

OffsetRgn
CreateRectRgnIndirect
DeleteMetaFile
CloseMetaFile
RestoreDC
SetWindowExtEx
SetWindowOrgEx
SaveDC
GetDeviceCaps
DeleteDC
OffsetViewportOrgEx
SelectObject
CreateCompatibleDC
GetClipBox
IntersectClipRect
LineTo
MoveToEx
CreatePen
RectVisible
ExcludeClipRect
CreateSolidBrush
SetStretchBltMode
SetTextColor
SetBkMode
OffsetWindowOrgEx
GetObjectType
CreateCompatibleBitmap
SetTextCharacterExtra
Rectangle
SetViewportOrgEx
DPtoLP
SetDIBitsToDevice
StretchDIBits
MaskBlt
StretchBlt
CreateDIBSection
GetDIBColorTable
PatBlt
GetRegionData
ExtCreateRegion
CombineRgn
BitBlt
GetTextMetricsW
GetTextMetricsA
GetObjectW
GetObjectA
CreateMetaFileW
CreateMetaFileA
CreateICW
CreateICA
CreateFontW
CreateFontA
CreateFontIndirectW
CreateFontIndirectA
CreateRectRgn
DeleteObject
GetStockObject

user32

GetDlgCtrlID
DestroyCursor
CallNextHookEx
UnhookWindowsHookEx
CharNextA
GetDesktopWindow
GetMenuStringW
GetMenuStringA
InsertMenuItemW
InsertMenuItemA
GetMenuItemInfoW
GetSysColor
MsgWaitForMultipleObjects
SetDlgItemInt
GetIconInfo
DrawIconEx
DestroyIcon
CheckMenuItem
CreateMenu
CheckMenuRadioItem
GetMenuItemCount
GetMenu
RemoveMenu
TrackPopupMenuEx
GetDoubleClickTime
GetAsyncKeyState
DeleteMenu
DrawMenuBar
GetSystemMetrics
CreatePopupMenu
GetSysColorBrush
WindowFromDC
SetRect
LoadStringA
FrameRect
GetSubMenu
EnableMenuItem
TrackPopupMenu
DestroyMenu
FillRect
IsRectEmpty
SetRectEmpty
ScreenToClient
ReleaseCapture
GetCapture
InvalidateRgn
IntersectRect
DestroyAcceleratorTable
UnionRect
SetProcessDefaultLayout
TranslateMessage
GetWindowRgn
CopyRect
GetUpdateRect
OffsetRect
SetWindowPos
EqualRect
ValidateRect
CloseWindow
SetCapture
GetCursorPos
MapWindowPoints
SetWindowRgn
SetWindowPlacement
GetTopWindow
GetWindow
IsWindowUnicode
GetDlgItem
EndDialog
GetActiveWindow
PtInRect
GetWindowPlacement
DrawAnimatedRects
GetMenuItemID
ClientToScreen
KillTimer
GetForegroundWindow
InvalidateRect
GetWindowThreadProcessId
RedrawWindow
GetDC
ReleaseDC
SetForegroundWindow
IsWindowVisible
BeginPaint
EndPaint
SetCursor
GetWindowRect
PostQuitMessage
IsWindowEnabled
SetActiveWindow
EnableWindow
DestroyWindow
GetClientRect
AdjustWindowRectEx
MoveWindow
IsIconic
ShowWindow
UpdateWindow
SetTimer
GetParent
GetFocus
IsChild
IsWindow
SetFocus
GetKeyState
RegisterWindowMessageA
AppendMenuA
AppendMenuW
CallWindowProcA
CallWindowProcW
CreateDialogParamA
CreateDialogParamW
CreateWindowExA
CreateWindowExW
DefWindowProcA
DefWindowProcW
DialogBoxParamA
DialogBoxParamW
DispatchMessageA
DispatchMessageW
DrawTextA
DrawTextW
FindWindowA
FindWindowW
GetClassInfoA
GetClassInfoW
GetClassInfoExA
GetClassInfoExW
GetClassLongA
GetClassLongW
SetClassLongA
SetClassLongW
GetClassNameA
GetClassNameW
GetDlgItemTextA
GetDlgItemTextW
GetMessageA
GetMessageW
GetWindowLongA
GetWindowLongW
GetWindowTextLengthA
GetWindowTextLengthW
GetWindowTextA
GetWindowTextW
InsertMenuA
InsertMenuW
IsDialogMessageA
IsDialogMessageW
LoadAcceleratorsA
LoadAcceleratorsW
LoadCursorA
LoadCursorW
LoadIconA
LoadIconW
LoadMenuA
LoadMenuW
LoadStringW
MessageBoxA
MessageBoxW
ModifyMenuA
ModifyMenuW
LoadImageA
LoadImageW
PeekMessageA
PeekMessageW
PostMessageA
PostMessageW
PostThreadMessageA
PostThreadMessageW
RegisterClassA
RegisterClassW
RegisterClassExA
RegisterClassExW
UnregisterClassA
UnregisterClassW
RegisterWindowMessageW
SendMessageA
SendMessageTimeoutA
SendMessageW
SendDlgItemMessageW
SetDlgItemTextA
SetDlgItemTextW
SetMenuItemInfoA
SetMenuItemInfoW
SetWindowLongA
SetWindowLongW
SetWindowsHookExA
SetWindowsHookExW
SetWindowTextA
SetWindowTextW
TranslateAcceleratorA
TranslateAcceleratorW
wvsprintfW
SystemParametersInfoA
SystemParametersInfoW
CharNextW
FindWindowExA
FindWindowExW
GetMenuItemInfoA

msvcrt

_controlfp
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_vsnwprintf
wcspbrk
_wsplitpath
_wcsicoll
wcscoll
vswprintf
wcsncpy
iswdigit
_beginthread
_endthread
towupper
_wcsupr
wcscat
_itow
_snwprintf
wcstol
swprintf
wcscmp
memmove
_wcsnicmp
strstr
malloc
_wcslwr
wcsstr
free
realloc
_wtoi
wcschr
wcscpy
wcslen
wcsrchr
_wcsicmp
??2@YAPAXI@Z
_purecall
_ftol
difftime
time
??3@YAXPAX@Z

Sections

.text
Size: 364KB - Virtual size: 361KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UPX0
Size: 108KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6f82f68af00bc7df72b286fe1d3c389e

Headers

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

msvcrt

Sections

.text Size: 364KB - Virtual size: 361KB

.rdata Size: 44KB - Virtual size: 40KB

.data Size: 24KB - Virtual size: 23KB

.rsrc Size: 72KB - Virtual size: 69KB

.UPX0 Size: 108KB - Virtual size: 260KB

.text
Size: 364KB - Virtual size: 361KB

.rdata
Size: 44KB - Virtual size: 40KB

.data
Size: 24KB - Virtual size: 23KB

.rsrc
Size: 72KB - Virtual size: 69KB

.UPX0
Size: 108KB - Virtual size: 260KB