85e29c0515f59551bb9566b4ce1ddc0b6751cb0c68b1179841dbf8d50a471fe6

Sharing

Copy URL Twitter E-mail

General

Target

85e29c0515f59551bb9566b4ce1ddc0b6751cb0c68b1179841dbf8d50a471fe6
Size

127KB
MD5

e66921923694e0ea60931b0f7c6a4807
SHA1

fb605708ae86dcb504c64d9c08211c6be80da298
SHA256

85e29c0515f59551bb9566b4ce1ddc0b6751cb0c68b1179841dbf8d50a471fe6
SHA512

ae6ff35eafb6e7aed3d6b144b1e1e08d5389ad2967495eecb427f41a64b184838a0c03bae5c387d2d2d3ca7bd4efbfdaf4bd57cc9be958702964d210ab2949da
SSDEEP

3072:KRQluTKTy4adV73exuJ/xjZb7blflAOhmQOMdKMFI:VUmuPdV73e8ZrlfOvMdKM+

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

85e29c0515f59551bb9566b4ce1ddc0b6751cb0c68b1179841dbf8d50a471fe6
.exe windows x86

Code Sign

33:00:00:02:f3:09:6e:45:07:d7:c0:24:96:00:00:00:00:02:f3
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

30/06/2022, 17:38

Not After

15/09/2023, 17:38

Subject

CN=Microsoft 3rd Party Application Component,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6d:8f:fe:f4:10:4c:71:12:32:dd:0f:9b:31:80:cc:82:77:a6:e5:6b:da:1c:76:d1:88:40:7e:3c:b7:69:de:b2
Signer

Actual PE Digest

6d:8f:fe:f4:10:4c:71:12:32:dd:0f:9b:31:80:cc:82:77:a6:e5:6b:da:1c:76:d1:88:40:7e:3c:b7:69:de:b2

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft 3rd Party Application Component,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

09/03/2023, 19:03
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 120KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 116KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1024B - Virtual size: 794B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1022B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:02:f3:09:6e:45:07:d7:c0:24:96:00:00:00:00:02:f3Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

6d:8f:fe:f4:10:4c:71:12:32:dd:0f:9b:31:80:cc:82:77:a6:e5:6b:da:1c:76:d1:88:40:7e:3c:b7:69:de:b2Signer

Signature Validations

Verification

09/03/2023, 19:03 Valid: false

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 120KB

UPX1 Size: 116KB - Virtual size: 120KB

.rsrc Size: 512B - Virtual size: 4KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 1024B - Virtual size: 794B

.rdata Size: 1024B - Virtual size: 1022B

.data Size: 512B - Virtual size: 804B

.rsrc Size: 208KB - Virtual size: 208KB

.reloc Size: 512B - Virtual size: 116B

33:00:00:02:f3:09:6e:45:07:d7:c0:24:96:00:00:00:00:02:f3
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

6d:8f:fe:f4:10:4c:71:12:32:dd:0f:9b:31:80:cc:82:77:a6:e5:6b:da:1c:76:d1:88:40:7e:3c:b7:69:de:b2
Signer

09/03/2023, 19:03
Valid: false

UPX0
Size: - Virtual size: 120KB

UPX1
Size: 116KB - Virtual size: 120KB

.rsrc
Size: 512B - Virtual size: 4KB

.text
Size: 1024B - Virtual size: 794B

.rdata
Size: 1024B - Virtual size: 1022B

.data
Size: 512B - Virtual size: 804B

.rsrc
Size: 208KB - Virtual size: 208KB

.reloc
Size: 512B - Virtual size: 116B