10d54410dbf8c99fc425efa5cc718555b650da99ee2f56a95311964a35252e56

Sharing

Copy URL Twitter E-mail

General

Target

10d54410dbf8c99fc425efa5cc718555b650da99ee2f56a95311964a35252e56
Size

1.9MB
MD5

9cff38351888d9552388bf708b78d911
SHA1

e34b1a33939f2ff464e30b583e19c1d932a6c982
SHA256

10d54410dbf8c99fc425efa5cc718555b650da99ee2f56a95311964a35252e56
SHA512

5dfc62bf15c0be00bd39f02529a8d9e37c29e8b3697e56262182ef7ce1aa6498c33484276a6cc5105a45fdecca8b16e5a819b376fa7e955393f7827ae38e4bfd
SSDEEP

49152:GvngHhXgQPwfHBmI2U6ZugqeGYyIJN4f0oLTMzIxEQH:AgHXofHUI6Hqo+vLg0yQ

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

10d54410dbf8c99fc425efa5cc718555b650da99ee2f56a95311964a35252e56
.exe windows x86

7729b23e0dbb83c57cd31f84ac27d8c8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

winmm

midiStreamProperty

ws2_32

WSAAsyncSelect

kernel32

GetTickCount
GetModuleHandleA
LoadLibraryA
VirtualAlloc
GetModuleFileNameA
ExitProcess

user32

IsChild
MessageBoxA

gdi32

FillRgn

winspool.drv

OpenPrinterA

advapi32

OpenProcessToken

shell32

Shell_NotifyIconA

ole32

OleRun

oleaut32

VariantCopyInd

comctl32

ImageList_DragShowNolock

oledlg

ord8

comdlg32

ChooseColorA

Sections

.text
Size: - Virtual size: 731KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

CODE
Size: - Virtual size: 330KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 976KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UPX0
Size: - Virtual size: 547KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.UPX1
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7729b23e0dbb83c57cd31f84ac27d8c8

Headers

File Characteristics

Imports

iphlpapi

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

oledlg

comdlg32

Sections

.text Size: - Virtual size: 731KB

CODE Size: - Virtual size: 330KB

.rdata Size: - Virtual size: 976KB

.data Size: - Virtual size: 266KB

DATA Size: - Virtual size: 67KB

BSS Size: - Virtual size: 25KB

.rsrc Size: 12KB - Virtual size: 26KB

.UPX0 Size: - Virtual size: 547KB

.UPX1 Size: 1.9MB - Virtual size: 1.9MB

.reloc Size: 4KB - Virtual size: 136B

.text
Size: - Virtual size: 731KB

CODE
Size: - Virtual size: 330KB

.rdata
Size: - Virtual size: 976KB

.data
Size: - Virtual size: 266KB

DATA
Size: - Virtual size: 67KB

BSS
Size: - Virtual size: 25KB

.rsrc
Size: 12KB - Virtual size: 26KB

.UPX0
Size: - Virtual size: 547KB

.UPX1
Size: 1.9MB - Virtual size: 1.9MB

.reloc
Size: 4KB - Virtual size: 136B