Priest[.]bin[.]exe

General

Target

Priest.bin.exe
Size

594KB
MD5

553b7ccd9f9f9ac01c0942f8379ead12
SHA1

9212a89cde84dc78630405b14f43c6c78b6a24ff
SHA256

ea4f1ab1b1b6a31626dc55863c42d11f135f298bbb914dc42a11cca5e3bc93a2
SHA512

751ca3bb12bfd8ca4248e1756a417e92745c9748cb08c3de1b78d689d51ba0f0086ccce9ab1926336c8f0e2258c9108f0018d5eb96d159e5423a78192b25f477
SSDEEP

12288:TXZc3xmLIJkUYOQc1mKS2/2+9eY+jBkOGjKO96l2bREsdQ7:TX7iZVhrS2O+9eY+jBQ/9N

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

Priest.bin.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 593KB - Virtual size: 596KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 664KB - Virtual size: 664KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 675KB - Virtual size: 674KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 94KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 1.1MB

UPX1 Size: 593KB - Virtual size: 596KB

UPX2 Size: 512B - Virtual size: 4KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 664KB - Virtual size: 664KB

.rdata Size: 675KB - Virtual size: 674KB

.data Size: 94KB - Virtual size: 266KB

.idata Size: 1024B - Virtual size: 988B

.reloc Size: 33KB - Virtual size: 32KB

.symtab Size: 512B - Virtual size: 4B

UPX0
Size: - Virtual size: 1.1MB

UPX1
Size: 593KB - Virtual size: 596KB

UPX2
Size: 512B - Virtual size: 4KB

.text
Size: 664KB - Virtual size: 664KB

.rdata
Size: 675KB - Virtual size: 674KB

.data
Size: 94KB - Virtual size: 266KB

.idata
Size: 1024B - Virtual size: 988B

.reloc
Size: 33KB - Virtual size: 32KB

.symtab
Size: 512B - Virtual size: 4B