f43d136de801e50121ca64dbdf7b43827a10e68b6bc07b41b6b669f4dea00f2d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f43d136de801e50121ca64dbdf7b43827a10e68b6bc07b41b6b669f4dea00f2d
Size

18KB
MD5

568a9bf65b77be0c0d3550a3bab84d5e
SHA1

c0a53cd31c9e4410ab760549395bf23295eb878f
SHA256

f43d136de801e50121ca64dbdf7b43827a10e68b6bc07b41b6b669f4dea00f2d
SHA512

c0f10e55d8216d1d1727d580b05742ebfe4d25330e77cdfc257e71806dfc06e11f36c4e629621bd38934d94c27b97ca7ae3e915ba05372486271f3f9d20998b9
SSDEEP

192:8BNdx6rfbv9IBPT5gWjLVGQurf4FtziTDP0WJw:CNdobvSBPT5gWPErfQtoDP0WJ

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

f43d136de801e50121ca64dbdf7b43827a10e68b6bc07b41b6b669f4dea00f2d
.exe windows x86

82b5b3084b92f34cb180a89756f7904f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
__vbaEnd
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaExitProc
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
__vbaVarTstEq
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
__vbaI4Var
__vbaStrToAnsi
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

UPX0
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE