c6cbcf5cf508ff8010313a1a251350e31a6bfadf217f0420d1cc32a394844b32[.]zip

General

Target

c6cbcf5cf508ff8010313a1a251350e31a6bfadf217f0420d1cc32a394844b32.zip
Size

52KB
MD5

201e0189a3b4ec6e746a4320327018c9
SHA1

982f4ae7e5be01f6a466d9ececdbbd9e66a84f2e
SHA256

6e92195d9fe10570075da200e23440d0fd23f4a86fab9de6a1b1fabd09127f3c
SHA512

22131bd5f19e9cba74fa9c471bff52cecb2fa6294bbc3319ecc275cdc6b3c186ae87b5ff48f1e16e218793923f06fd623de8209dffddac7546eb72b58863bec8
SSDEEP

1536:KHT76+10Xe2ISdU8Xm3cXPinLbl8q4U3r:K6+1i2Sd5X0wanL583Ub

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/paq8o.bin	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/paq8o.bin
unpack002/out.upx

Files

c6cbcf5cf508ff8010313a1a251350e31a6bfadf217f0420d1cc32a394844b32.zip
.zip

Password: infected
paq8o.bin
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 476KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_TEXT
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT$XIA
Size: 15KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.debug
Size: 28B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Password: infected

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 476KB

UPX1 Size: 53KB - Virtual size: 56KB

UPX2 Size: 512B - Virtual size: 4KB

Headers

File Characteristics

Sections

.idata Size: 1KB - Virtual size: 1KB

_TEXT Size: 91KB - Virtual size: 91KB

.CRT$XIA Size: 15KB - Virtual size: 416KB

.reloc Size: 8KB - Virtual size: 8KB

.debug Size: 28B - Virtual size: 512B

UPX0
Size: - Virtual size: 476KB

UPX1
Size: 53KB - Virtual size: 56KB

UPX2
Size: 512B - Virtual size: 4KB

.idata
Size: 1KB - Virtual size: 1KB

_TEXT
Size: 91KB - Virtual size: 91KB

.CRT$XIA
Size: 15KB - Virtual size: 416KB

.reloc
Size: 8KB - Virtual size: 8KB

.debug
Size: 28B - Virtual size: 512B