a38d085298c2380b5d92336c5e470fc2709f08dffaf86854de8a936792f94956

General

Target

a38d085298c2380b5d92336c5e470fc2709f08dffaf86854de8a936792f94956
Size

152KB
MD5

2e1fe000fd85167c0ef555c8a9626d8a
SHA1

ae3e2cdea29efde17a77161d01313b1cbfb639bd
SHA256

a38d085298c2380b5d92336c5e470fc2709f08dffaf86854de8a936792f94956
SHA512

10f88c0149a01401ed8d294ff38d07854e61c5fa819bb4f96133242b8150644e0d67152a0f6d84ff74918ccbfd50334afb7fc15d6506414531e1c3c0659ca2ab
SSDEEP

3072:s5rToRoXkRizfSnKmo6p2SLc8RMsnq9Jkg4f:sG2OirS/oa3c8SuUMf

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

a38d085298c2380b5d92336c5e470fc2709f08dffaf86854de8a936792f94956
.exe windows x86

25ac6ac321f08927f613d46b0bbd3960

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
GlobalAlloc
ReadFile
QueryPerformanceFrequency
CreateFileA
QueryPerformanceCounter
SetFilePointer
GetFileSize
SetEndOfFile
DeviceIoControl
CloseHandle
WriteFile
GetLastError
GetModuleFileNameA
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetProcAddress
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetSystemDirectoryA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

advapi32

RegSetValueExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.UPX0
Size: 104KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

25ac6ac321f08927f613d46b0bbd3960

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 11KB

.UPX0 Size: 104KB - Virtual size: 252KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 11KB

.UPX0
Size: 104KB - Virtual size: 252KB