b5ae87d516c30d8d0adaa9cf618215b8158325bc0422e51cc3782752052c2b07

Sharing

Copy URL Twitter E-mail

General

Target

b5ae87d516c30d8d0adaa9cf618215b8158325bc0422e51cc3782752052c2b07
Size

103KB
MD5

d826b2b061255e16b4eb6fe5d94c29b1
SHA1

0e0854c57bb88f8266fe0d7f461ac96c89fc4c6c
SHA256

b5ae87d516c30d8d0adaa9cf618215b8158325bc0422e51cc3782752052c2b07
SHA512

a732bf3ca365b299d41343bed41392c02c41e7e113df09d3116bda1bc39f5d50f85f2f5ce858967b90a63e120e11f1af41a83322e58b90b88bc099e7e459ada5
SSDEEP

3072:hVL7XPxwy/i6LuNRlp8mlzqiWqysvnBqzVY9mnqIvSo:hVffey/PiNpdlWiDJv39QqIx

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

b5ae87d516c30d8d0adaa9cf618215b8158325bc0422e51cc3782752052c2b07
.exe windows x86

Code Sign

71:4e:a7:c5:18:89:90:83:4b:eb:dd:20:14:72:25:01
Certificate

Issuer

CN=TEST1

Not Before

06/08/2011, 09:30

Not After

31/12/2039, 23:59

Subject

CN=TEST1

Extended Key Usages

ExtKeyUsageCodeSigning

d7:e8:0c:cd:ce:fb:3f:a1:50:18:63:5e:39:9b:39:e0:3f:4b:fd:a4
Signer

Actual PE Digest

d7:e8:0c:cd:ce:fb:3f:a1:50:18:63:5e:39:9b:39:e0:3f:4b:fd:a4

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=TEST1

01/12/2022, 14:34
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 41KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

71:4e:a7:c5:18:89:90:83:4b:eb:dd:20:14:72:25:01Certificate

Extended Key Usages

d7:e8:0c:cd:ce:fb:3f:a1:50:18:63:5e:39:9b:39:e0:3f:4b:fd:a4Signer

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 80KB

UPX1 Size: 41KB - Virtual size: 44KB

.rsrc Size: 7KB - Virtual size: 8KB

Headers

File Characteristics

Sections

.text Size: 68KB - Virtual size: 68KB

.data Size: 2KB - Virtual size: 28KB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 14KB - Virtual size: 16KB

71:4e:a7:c5:18:89:90:83:4b:eb:dd:20:14:72:25:01
Certificate

d7:e8:0c:cd:ce:fb:3f:a1:50:18:63:5e:39:9b:39:e0:3f:4b:fd:a4
Signer

01/12/2022, 14:34
Valid: false

UPX0
Size: - Virtual size: 80KB

UPX1
Size: 41KB - Virtual size: 44KB

.rsrc
Size: 7KB - Virtual size: 8KB

.text
Size: 68KB - Virtual size: 68KB

.data
Size: 2KB - Virtual size: 28KB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 14KB - Virtual size: 16KB