d8c646ef1d20de6964177a0b1e66e21ba9e7be60ab504c2a119e1b375ca5fb68

General

Target

d8c646ef1d20de6964177a0b1e66e21ba9e7be60ab504c2a119e1b375ca5fb68
Size

686KB
MD5

735a2321e579e10aa811a37b463c24ed
SHA1

985d174e572e95639754504d971bbab2cc9c6908
SHA256

d8c646ef1d20de6964177a0b1e66e21ba9e7be60ab504c2a119e1b375ca5fb68
SHA512

03bc4317a3ab11df363d1e0a72b249eb0aee105c721362dcca2de617e767f254476dca78ce77950671ba8f51aba856a6c69723f49ed5ef8343395b06c6a16b86
SSDEEP

12288:9uwwW2lKQC3DHd4PqE1JCcChPDAY54rsP7cpsAnHb2OA/6uyMlEamc42Olmj92o4:9uw0KQKjdK71JRyUY54aAHb2F2O9BsrP

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
d8c646ef1d20de6964177a0b1e66e21ba9e7be60ab504c2a119e1b375ca5fb68
unpack001/out.upx

Files

d8c646ef1d20de6964177a0b1e66e21ba9e7be60ab504c2a119e1b375ca5fb68
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 704KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 663KB - Virtual size: 664KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 944KB - Virtual size: 944KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 704KB

UPX1 Size: 663KB - Virtual size: 664KB

.rsrc Size: 1KB - Virtual size: 4KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 944KB - Virtual size: 944KB

.rdata Size: 266KB - Virtual size: 266KB

.data Size: 44KB - Virtual size: 62KB

.gfids Size: 512B - Virtual size: 300B

.rsrc Size: 1024B - Virtual size: 880B

.reloc Size: 46KB - Virtual size: 45KB

UPX0
Size: - Virtual size: 704KB

UPX1
Size: 663KB - Virtual size: 664KB

.rsrc
Size: 1KB - Virtual size: 4KB

.text
Size: 944KB - Virtual size: 944KB

.rdata
Size: 266KB - Virtual size: 266KB

.data
Size: 44KB - Virtual size: 62KB

.gfids
Size: 512B - Virtual size: 300B

.rsrc
Size: 1024B - Virtual size: 880B

.reloc
Size: 46KB - Virtual size: 45KB