ec4190697324ab284e28f79a013e9e62458cd5ed1a9fd4b2de778c6bed28f3eb

Sharing

Copy URL Twitter E-mail

General

Target

ec4190697324ab284e28f79a013e9e62458cd5ed1a9fd4b2de778c6bed28f3eb
Size

1.3MB
MD5

ed5294b6a38f66c2b607ca2952964a0f
SHA1

dd6d23222a9f86dfae0f4df0498fd7282b2a1e5a
SHA256

ec4190697324ab284e28f79a013e9e62458cd5ed1a9fd4b2de778c6bed28f3eb
SHA512

80d7e5705a51a923ce4cb1e9c480a6c1712045cacc99f7bbe291b938682abad75117ec887909dc3ddb828b612f2d408b28f61f98dc36dbab90dde4744877659f
SSDEEP

12288:O0Ofwkc/p5B166j/8NAag8ag4Za04pDxaS5QSYs0f:9O43/G6z8rqDZa04SS53YsE

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

ec4190697324ab284e28f79a013e9e62458cd5ed1a9fd4b2de778c6bed28f3eb
.exe windows:4 windows x86

Code Sign

33:00:00:04:25:35:21:6f:36:08:7c:eb:06:00:00:00:00:04:25
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:25

Not After

01/09/2022, 18:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

94:94:0f:68:80:3b:6f:15:77:f7:eb:22:d2:ed:5b:1f:22:c7:af:39:dd:19:25:ce:75:9f:09:bd:e6:53:22:28
Signer

Actual PE Digest

94:94:0f:68:80:3b:6f:15:77:f7:eb:22:d2:ed:5b:1f:22:c7:af:39:dd:19:25:ce:75:9f:09:bd:e6:53:22:28

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:04:25:35:21:6f:36:08:7c:eb:06:00:00:00:00:04:25Certificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

94:94:0f:68:80:3b:6f:15:77:f7:eb:22:d2:ed:5b:1f:22:c7:af:39:dd:19:25:ce:75:9f:09:bd:e6:53:22:28Signer

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 56KB

UPX1 Size: 13KB - Virtual size: 16KB

UPX2 Size: 512B - Virtual size: 4KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

33:00:00:04:25:35:21:6f:36:08:7c:eb:06:00:00:00:00:04:25
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

94:94:0f:68:80:3b:6f:15:77:f7:eb:22:d2:ed:5b:1f:22:c7:af:39:dd:19:25:ce:75:9f:09:bd:e6:53:22:28
Signer

UPX0
Size: - Virtual size: 56KB

UPX1
Size: 13KB - Virtual size: 16KB

UPX2
Size: 512B - Virtual size: 4KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB