ef6599203aeeb143e7276181b468b85a5a5fc8a71a486d0624b4dfd14f00973e

Sharing

Copy URL Twitter E-mail

General

Target

ef6599203aeeb143e7276181b468b85a5a5fc8a71a486d0624b4dfd14f00973e
Size

310KB
MD5

c04ed722b0571fa4fe69d65daf11f6fd
SHA1

daa7997ca68a230eb4ecd8f08408f2fb609b6c02
SHA256

ef6599203aeeb143e7276181b468b85a5a5fc8a71a486d0624b4dfd14f00973e
SHA512

3f834e2f2570a2790d1af2a6b2f8029bb5c458761ee0870f7eb9e846d15bbffffa8fce7397a4e45cbbe9bedff1b40cd4ed32dc98b0411a7d71915d994615e3e8
SSDEEP

6144:PLWGSJDSyJkq1iyaHmXuIiCFXgohjdupBNVTVnSR:P9SBU5+tJDgFTVn

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

ef6599203aeeb143e7276181b468b85a5a5fc8a71a486d0624b4dfd14f00973e
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 308KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 276KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 18KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 28KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

CRT
Size: 35KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CRT
Size: 9KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 17KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 18KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 13KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 40KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

CRT
Size: 25KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 17KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 308KB

UPX1 Size: 276KB - Virtual size: 280KB

.rsrc Size: 32KB - Virtual size: 36KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 13KB - Virtual size: 12KB

.bss Size: 18KB - Virtual size: 27KB

DATA Size: 28KB - Virtual size: 39KB

CRT Size: 35KB - Virtual size: 48KB

.rdata Size: 31KB - Virtual size: 39KB

CRT Size: 9KB - Virtual size: 24KB

.idata Size: 17KB - Virtual size: 27KB

.idata Size: 18KB - Virtual size: 28KB

.edata Size: 13KB - Virtual size: 26KB

.rdata Size: 40KB - Virtual size: 55KB

.data Size: 35KB - Virtual size: 47KB

DATA Size: 8KB - Virtual size: 20KB

CRT Size: 25KB - Virtual size: 38KB

.rdata Size: 9KB - Virtual size: 16KB

DATA Size: 14KB - Virtual size: 24KB

INIT Size: 17KB - Virtual size: 29KB

.rsrc Size: 32KB - Virtual size: 31KB

.reloc Size: 512B - Virtual size: 24B

UPX0
Size: - Virtual size: 308KB

UPX1
Size: 276KB - Virtual size: 280KB

.rsrc
Size: 32KB - Virtual size: 36KB

.text
Size: 13KB - Virtual size: 12KB

.bss
Size: 18KB - Virtual size: 27KB

DATA
Size: 28KB - Virtual size: 39KB

CRT
Size: 35KB - Virtual size: 48KB

.rdata
Size: 31KB - Virtual size: 39KB

CRT
Size: 9KB - Virtual size: 24KB

.idata
Size: 17KB - Virtual size: 27KB

.idata
Size: 18KB - Virtual size: 28KB

.edata
Size: 13KB - Virtual size: 26KB

.rdata
Size: 40KB - Virtual size: 55KB

.data
Size: 35KB - Virtual size: 47KB

DATA
Size: 8KB - Virtual size: 20KB

CRT
Size: 25KB - Virtual size: 38KB

.rdata
Size: 9KB - Virtual size: 16KB

DATA
Size: 14KB - Virtual size: 24KB

INIT
Size: 17KB - Virtual size: 29KB

.rsrc
Size: 32KB - Virtual size: 31KB

.reloc
Size: 512B - Virtual size: 24B