23614a705c8222874f6a89fc429d413698964345b12c57f35e4fd844dd2b9a90[.]exe[.]zip

General

Target

23614a705c8222874f6a89fc429d413698964345b12c57f35e4fd844dd2b9a90.exe.zip
Size

918KB
MD5

fd085b660f3aeffe75f6193aacb096d4
SHA1

92b12898abc9f186d58e6216114e48d5588bdbf3
SHA256

88ad380cf5f8910c2415d7e71e5c47ea93c39eec31b4de2cb19cfe433c4f7b8a
SHA512

d6704ed64fc472aba7eb16ce9da46471e313c310906b574cd336d37c4ced3a8c708fe86f0f86f3eaca4a0788db37de729df9d59dc03158a7e3862b83e88c8d19
SSDEEP

24576:53IxIvQMl4DPZ+1d4HMlfFJzrTBsAZlpxsnx+sQ8R/outJ:5JKx+d4sPJXTBsAzsx+nu3

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/23614a705c8222874f6a89fc429d413698964345b12c57f35e4fd844dd2b9a90.exe	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/23614a705c8222874f6a89fc429d413698964345b12c57f35e4fd844dd2b9a90.exe
unpack002/out.upx

Files

23614a705c8222874f6a89fc429d413698964345b12c57f35e4fd844dd2b9a90.exe.zip
.zip

Password: infected
23614a705c8222874f6a89fc429d413698964345b12c57f35e4fd844dd2b9a90.exe
.exe windows:5 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 2.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 844KB - Virtual size: 844KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 543KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 1024B - Virtual size: 806B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 76B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 598KB - Virtual size: 598KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 2.4MB

UPX1 Size: 844KB - Virtual size: 844KB

.rsrc Size: 108KB - Virtual size: 112KB

Headers

File Characteristics

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.itext Size: 14KB - Virtual size: 13KB

.data Size: 40KB - Virtual size: 40KB

.bss Size: - Virtual size: 543KB

.idata Size: 16KB - Virtual size: 16KB

.didata Size: 1024B - Virtual size: 806B

.tls Size: - Virtual size: 76B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 169KB - Virtual size: 169KB

.rsrc Size: 598KB - Virtual size: 598KB

UPX0
Size: - Virtual size: 2.4MB

UPX1
Size: 844KB - Virtual size: 844KB

.rsrc
Size: 108KB - Virtual size: 112KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.itext
Size: 14KB - Virtual size: 13KB

.data
Size: 40KB - Virtual size: 40KB

.bss
Size: - Virtual size: 543KB

.idata
Size: 16KB - Virtual size: 16KB

.didata
Size: 1024B - Virtual size: 806B

.tls
Size: - Virtual size: 76B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 169KB - Virtual size: 169KB

.rsrc
Size: 598KB - Virtual size: 598KB