5f12844b79f580c574bec05d6553b9a5a169e8ebd710bf2aa9b58f5adbb81879

General

Target

5f12844b79f580c574bec05d6553b9a5a169e8ebd710bf2aa9b58f5adbb81879
Size

15.9MB
MD5

b8e9dc2bfb2666edadfd4d3de35277bc
SHA1

cc2214ab2b343ddea15619763ac04a47a6c9065f
SHA256

5f12844b79f580c574bec05d6553b9a5a169e8ebd710bf2aa9b58f5adbb81879
SHA512

dac96b92986f8469fe7ec3ed17ad53b3554b6507e43702ca129b5d1cdde441cac363ab310303a33f802544466d3ce8b5989293f24a7be0abfa0f0983d961640c
SSDEEP

393216:P4REqmavGYDN1xde6OWPVFKEtldY2avp:Ra+Yh/wqP/d

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
5f12844b79f580c574bec05d6553b9a5a169e8ebd710bf2aa9b58f5adbb81879
unpack001/out.upx

Files

5f12844b79f580c574bec05d6553b9a5a169e8ebd710bf2aa9b58f5adbb81879
.exe windows:6 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

UPX0
Size: - Virtual size: 30.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 15.8MB - Virtual size: 15.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:6 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 23.4MB - Virtual size: 23.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8.7MB - Virtual size: 8.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.9MB - Virtual size: 11.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 876KB - Virtual size: 875KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 1024B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msvcjmc
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 30.6MB

UPX1 Size: 15.8MB - Virtual size: 15.8MB

.rsrc Size: 98KB - Virtual size: 100KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 23.4MB - Virtual size: 23.4MB

.rdata Size: 8.7MB - Virtual size: 8.7MB

.data Size: 2.9MB - Virtual size: 11.6MB

.pdata Size: 876KB - Virtual size: 875KB

.rodata Size: 512B - Virtual size: 512B

.rdata Size: 512B - Virtual size: 512B

_RDATA Size: 1024B - Virtual size: 560B

.msvcjmc Size: 143KB - Virtual size: 142KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

UPX0
Size: - Virtual size: 30.6MB

UPX1
Size: 15.8MB - Virtual size: 15.8MB

.rsrc
Size: 98KB - Virtual size: 100KB

.text
Size: 23.4MB - Virtual size: 23.4MB

.rdata
Size: 8.7MB - Virtual size: 8.7MB

.data
Size: 2.9MB - Virtual size: 11.6MB

.pdata
Size: 876KB - Virtual size: 875KB

.rodata
Size: 512B - Virtual size: 512B

.rdata
Size: 512B - Virtual size: 512B

_RDATA
Size: 1024B - Virtual size: 560B

.msvcjmc
Size: 143KB - Virtual size: 142KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB