bd78f5f0cae21f03df77d1e456d2b43caadc83e55be139cae99af412438c8364

Sharing

Copy URL Twitter E-mail

General

Target

bd78f5f0cae21f03df77d1e456d2b43caadc83e55be139cae99af412438c8364
Size

12.9MB
MD5

4ce1ffc27a13af8f7a910132dac2ad7e
SHA1

fb815c120548be47b577a320f42386ed5731c0bb
SHA256

bd78f5f0cae21f03df77d1e456d2b43caadc83e55be139cae99af412438c8364
SHA512

77d5f64e07b7735b04cb161acd11ff91a36c2daf555b916d8ecb05886f2d86deebbc0f4ee84e279551997c45efa679ae6576d3613a95266e7099f0bedabfdb32
SSDEEP

393216:gt8EHJPu9oGEP3dp6FYOTunhM3lUxwspP8cc/jq5JE1IRuZ:gt8EHJxnlp6FYWunhMVUxdpU1rqXE1n

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
bd78f5f0cae21f03df77d1e456d2b43caadc83e55be139cae99af412438c8364
unpack001/out.upx

Files

bd78f5f0cae21f03df77d1e456d2b43caadc83e55be139cae99af412438c8364
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 17.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 12.9MB - Virtual size: 12.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 7.7MB - Virtual size: 7.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14.7MB - Virtual size: 14.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 467KB - Virtual size: 896KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 512B - Virtual size: 295B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/32
Size: 274KB - Virtual size: 274KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/46
Size: 512B - Virtual size: 42B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/65
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/78
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/90
Size: 366KB - Virtual size: 366KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 17.6MB

UPX1 Size: 12.9MB - Virtual size: 12.9MB

UPX2 Size: 512B - Virtual size: 4KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 7.7MB - Virtual size: 7.7MB

.rdata Size: 14.7MB - Virtual size: 14.7MB

.data Size: 467KB - Virtual size: 896KB

/4 Size: 512B - Virtual size: 295B

/19 Size: 1.1MB - Virtual size: 1.1MB

/32 Size: 274KB - Virtual size: 274KB

/46 Size: 512B - Virtual size: 42B

/65 Size: 2.1MB - Virtual size: 2.1MB

/78 Size: 1.5MB - Virtual size: 1.5MB

/90 Size: 366KB - Virtual size: 366KB

.idata Size: 1KB - Virtual size: 1KB

.reloc Size: 144KB - Virtual size: 143KB

.symtab Size: 1.7MB - Virtual size: 1.7MB

UPX0
Size: - Virtual size: 17.6MB

UPX1
Size: 12.9MB - Virtual size: 12.9MB

UPX2
Size: 512B - Virtual size: 4KB

.text
Size: 7.7MB - Virtual size: 7.7MB

.rdata
Size: 14.7MB - Virtual size: 14.7MB

.data
Size: 467KB - Virtual size: 896KB

/4
Size: 512B - Virtual size: 295B

/19
Size: 1.1MB - Virtual size: 1.1MB

/32
Size: 274KB - Virtual size: 274KB

/46
Size: 512B - Virtual size: 42B

/65
Size: 2.1MB - Virtual size: 2.1MB

/78
Size: 1.5MB - Virtual size: 1.5MB

/90
Size: 366KB - Virtual size: 366KB

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 144KB - Virtual size: 143KB

.symtab
Size: 1.7MB - Virtual size: 1.7MB