2019款解码软件v1[.]0[.]0[.]5[.]exe

General

Target

2019款解码软件v1.0.0.5.exe
Size

559KB
MD5

806685fbfa34457859d8dc2b90cecb03
SHA1

e7a98fd5626e3f78ef06f4856196652bf1f44135
SHA256

7869fe35be8b1de490b207a0cfe061d25181e2888c669b6a18e98275afb2d86d
SHA512

a9ffbf7abec19dfe7517d6545190d52cb3c8a4e9ab5d41b211ba23d78dd8c2ecd775b4ffdd1fb74dbc05ba868e4917ca74369c4524f54169f5c29980c80be5bc
SSDEEP

12288:zFgPtE3z0r9RRFk5GFCYfu++nsEaoAB5NC00hUDPw2Z:zFqa8R8VaoAB5NB0hUDF

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
2019款解码软件v1.0.0.5.exe
unpack001/out.upx

Files

2019款解码软件v1.0.0.5.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 868KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 535KB - Virtual size: 536KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

LZ4_compress
LZ4_compressBound
LZ4_compress_continue
LZ4_compress_default
LZ4_compress_destSize
LZ4_compress_fast
LZ4_compress_fast_continue
LZ4_compress_fast_extState
LZ4_compress_limitedOutput
LZ4_compress_limitedOutput_continue
LZ4_compress_limitedOutput_withState
LZ4_compress_withState
LZ4_create
LZ4_createStream
LZ4_createStreamDecode
LZ4_decoderRingBufferSize
LZ4_decompress_fast
LZ4_decompress_fast_continue
LZ4_decompress_fast_usingDict
LZ4_decompress_fast_withPrefix64k
LZ4_decompress_safe
LZ4_decompress_safe_continue
LZ4_decompress_safe_partial
LZ4_decompress_safe_usingDict
LZ4_decompress_safe_withPrefix64k
LZ4_freeStream
LZ4_freeStreamDecode
LZ4_initStream
LZ4_loadDict
LZ4_resetStream
LZ4_resetStreamState
LZ4_resetStream_fast
LZ4_saveDict
LZ4_setStreamDecode
LZ4_sizeofState
LZ4_sizeofStreamState
LZ4_slideInputBuffer
LZ4_uncompress
LZ4_uncompress_unknownOutputSize
LZ4_versionNumber
LZ4_versionString

Sections

.text
Size: 943KB - Virtual size: 943KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 215KB - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 868KB

UPX1 Size: 535KB - Virtual size: 536KB

.rsrc Size: 23KB - Virtual size: 24KB

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.text Size: 943KB - Virtual size: 943KB

.rdata Size: 143KB - Virtual size: 143KB

.data Size: 16KB - Virtual size: 22KB

.rsrc Size: 215KB - Virtual size: 215KB

.reloc Size: 41KB - Virtual size: 40KB

UPX0
Size: - Virtual size: 868KB

UPX1
Size: 535KB - Virtual size: 536KB

.rsrc
Size: 23KB - Virtual size: 24KB

.text
Size: 943KB - Virtual size: 943KB

.rdata
Size: 143KB - Virtual size: 143KB

.data
Size: 16KB - Virtual size: 22KB

.rsrc
Size: 215KB - Virtual size: 215KB

.reloc
Size: 41KB - Virtual size: 40KB