155f6d4a8e41a54264caa479c8aac0a64f7d5302668afdadfb07e8011eb2ac0e

Sharing

Copy URL

Twitter E-mail

General

Target

155f6d4a8e41a54264caa479c8aac0a64f7d5302668afdadfb07e8011eb2ac0e
Size

1.2MB
MD5

8281dc80275ed47b3779ced1318199ae
SHA1

24a2127b1817b46fa41661c18f913b59c42dbbf3
SHA256

155f6d4a8e41a54264caa479c8aac0a64f7d5302668afdadfb07e8011eb2ac0e
SHA512

9954f2315e016106277fe609e5c30d9b6b38692befe312b4fecb5e12a983f8bf2fd5de1d4ca1ce1b63fdf809df041582ee0fce628e302332316287ee6aa1965c
SSDEEP

24576:UUW136509ZmdW77mcgKsoLcQaMyoV2sOU16/ZRtEQynRljU/TGavLuSgL:uZ+ZDoV2zPE/MPLuSg

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

155f6d4a8e41a54264caa479c8aac0a64f7d5302668afdadfb07e8011eb2ac0e
.exe windows x86

567bfe5cac82bb1d58c96383da1dd1c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
lstrlenA
SetEvent
GetLocaleInfoA
ResetEvent
UnhandledExceptionFilter
CreateMutexA
ReleaseMutex
CreateEventA
CloseHandle
OpenEventA
WaitForSingleObject
GetModuleHandleA
InitializeCriticalSection
FreeLibrary
LoadLibraryA
GetProcAddress
GetLastError
MulDiv
GetTickCount
Sleep
InterlockedExchange
GlobalAlloc
GlobalLock
GlobalUnlock
TerminateThread
GetVersionExA
GlobalFree
InterlockedIncrement
GetCurrentThreadId
GetCommandLineA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
LocalFileTimeToFileTime
TlsSetValue
TlsGetValue
HeapCreate
LoadLibraryExW
GlobalMemoryStatus
GlobalSize
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
SetStdHandle
GetStringTypeW
GetStringTypeA
IsBadCodePtr
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
IsValidCodePage
IsValidLocale
LCMapStringW
LCMapStringA
GetCPInfo
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
IsBadWritePtr
GetEnvironmentVariableA
SetUnhandledExceptionFilter
HeapSize
HeapReAlloc
IsBadReadPtr
GetVersion
GetStartupInfoA
GetCurrentProcess
GetPrivateProfileStringA
CopyFileW
GetTempFileNameA
GetTempPathW
GetTempPathA
TerminateProcess
ExitProcess
SetLastError
FindResourceA
GetSystemDefaultLangID
FindNextFileW
FindNextFileA
GetDiskFreeSpaceW
GetDiskFreeSpaceA
CreateDirectoryW
CreateDirectoryA
GetFullPathNameW
GetFullPathNameA
GetWindowsDirectoryA
GetWindowsDirectoryW
GetSystemDirectoryA
GetSystemDirectoryW
GetCurrentDirectoryA
GetCurrentDirectoryW
MoveFileW
MoveFileA
LocalFree
FormatMessageA
GetOEMCP
GetACP
WideCharToMultiByte
GetModuleFileNameA
LoadLibraryExA
GetTempFileNameW
SearchPathW
SearchPathA
WritePrivateProfileStringA
GetFileAttributesA
InterlockedDecrement
SystemTimeToFileTime
GetLocalTime
FileTimeToSystemTime
FileTimeToLocalFileTime
CreateFileA
CreateFileW
FlushFileBuffers
SetFilePointer
SetEndOfFile
GetFileSize
ReadFile
WriteFile
VirtualAlloc
FindFirstFileA
FindClose
FindFirstFileW
SetFileAttributesW
GetFileAttributesW
SetFileAttributesA
HeapDestroy
MultiByteToWideChar
GetModuleFileNameW
GetFileType
GetStdHandle
TlsAlloc
TlsFree
HeapAlloc
GetSystemInfo
VirtualFree
RaiseException
HeapFree
RtlUnwind
OutputDebugStringA
GetProcessHeap
DeleteFileW
GetDriveTypeA
GetDriveTypeW
DeleteFileA
CopyFileA

user32

SystemParametersInfoA
GetMenuItemCount
MsgWaitForMultipleObjects
PostThreadMessageA
RegisterWindowMessageA
GetMessageA
PeekMessageA
DefWindowProcA
EnableMenuItem
CreateWindowExA
RegisterClassA
GetSysColorBrush
DeleteMenu
GetDesktopWindow
GetCapture
ClientToScreen
GetKeyState
GetDlgCtrlID
IsWindowEnabled
SetFocus
SendDlgItemMessageA
GetDlgItem
GetWindowTextLengthA
IsDialogMessageA
DialogBoxParamA
EndDialog
BringWindowToTop
SetActiveWindow
GetWindowTextA
GetParent
GetWindowLongA
GetWindowRect
SetWindowTextA
MoveWindow
TranslateMessage
DispatchMessageA
LoadStringA
MessageBoxA
LoadStringW
MessageBoxW
IsWindowVisible
wsprintfA
GetWindow
SetCursor
LoadCursorA
GetDC
ReleaseDC
GetAsyncKeyState
IsWindow
SetForegroundWindow
GetLastActivePopup
LoadIconA
ShowWindow
PostMessageA
DestroyWindow
GetClientRect
FillRect
BeginPaint
EndPaint
SetWindowLongA
CallWindowProcA
IsDlgButtonChecked
CheckDlgButton
EnableWindow
SendMessageA
GetSystemMenu

gdi32

CreateBrushIndirect
GetDIBits
CreateCompatibleDC
DeleteDC
GetObjectA
DeleteObject

version

VerQueryValueA
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
GetFileVersionInfoW
GetFileVersionInfoA

comctl32

ord17

rpcrt4

NdrSimpleStructBufferSize
RpcMgmtStopServerListening
RpcServerUnregisterIf
RpcServerInqBindings
RpcEpUnregister
RpcServerUseProtseqEpA
RpcServerRegisterIf
RpcServerListen
NdrSimpleStructUnmarshall
NdrAllocate
NdrConformantArrayBufferSize
NdrConformantArrayMarshall
NdrComplexStructBufferSize
NdrComplexStructMarshall
NdrSimpleStructMarshall
NdrFixedArrayMarshall
NdrPointerFree
NdrConformantStringUnmarshall
NdrServerInitializeNew
NdrConvert
NdrServerContextUnmarshall
RpcRaiseException
I_RpcGetBuffer
NdrServerContextMarshall

advapi32

RegCloseKey
RegisterEventSourceA
DeregisterEventSource
ReportEventW
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegQueryInfoKeyA

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA

oleaut32

SysFreeString

Exports

Exports

__FineObjLib
__FineObjUsed

Sections

.text
Size: 920KB - Virtual size: 918KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 116KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UPX0
Size: 108KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

567bfe5cac82bb1d58c96383da1dd1c5

Headers

File Characteristics

Imports

kernel32

user32

gdi32

version

comctl32

rpcrt4

advapi32

shell32

oleaut32

Exports

Exports

Sections

.text Size: 920KB - Virtual size: 918KB

.rdata Size: 116KB - Virtual size: 112KB

.data Size: 84KB - Virtual size: 98KB

.rsrc Size: 16KB - Virtual size: 14KB

.UPX0 Size: 108KB - Virtual size: 260KB

.text
Size: 920KB - Virtual size: 918KB

.rdata
Size: 116KB - Virtual size: 112KB

.data
Size: 84KB - Virtual size: 98KB

.rsrc
Size: 16KB - Virtual size: 14KB

.UPX0
Size: 108KB - Virtual size: 260KB