c67d8b6fd2c06c65ba27a3e7f32e3400e62f51a79ea483e7eee8ffe9ebefe42a

General

Target

c67d8b6fd2c06c65ba27a3e7f32e3400e62f51a79ea483e7eee8ffe9ebefe42a
Size

627KB
MD5

b02953bc9788350c7744c90a5cb89ac3
SHA1

47c576c193954abda881d07377ab9e6ae0587ac6
SHA256

c67d8b6fd2c06c65ba27a3e7f32e3400e62f51a79ea483e7eee8ffe9ebefe42a
SHA512

8daa0f161481aa4b4d6df90e65e3cca7117a60a287b46b8eae73f831caf1b65b9553974e97f5c02d8bc2cd343941fee10926193870fb539d92cbb1a832790a43
SSDEEP

12288:0zsns/ERJKsqdtC0bK7zI6CvvYORT8e2RsUF6k8Jp4AUK8zKyJXJ7N:KEOSZxqLRTMf6k8RUKShJ57N

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c67d8b6fd2c06c65ba27a3e7f32e3400e62f51a79ea483e7eee8ffe9ebefe42a

Files

c67d8b6fd2c06c65ba27a3e7f32e3400e62f51a79ea483e7eee8ffe9ebefe42a
.dll windows:4 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

x264_10_frame_pop
x264_10_frame_push
x264_10_frame_shift
x264_10_frame_unshift
x264_10_threadpool_delete
x264_10_threadpool_init
x264_10_threadpool_run
x264_10_threadpool_wait
x264_8_frame_pop
x264_8_frame_push
x264_8_frame_shift
x264_8_frame_unshift
x264_8_threadpool_delete
x264_8_threadpool_init
x264_8_threadpool_run
x264_8_threadpool_wait
x264_chroma_format
x264_cpu_detect
x264_cpu_names
x264_cpu_num_processors
x264_encoder_close
x264_encoder_delayed_frames
x264_encoder_encode
x264_encoder_headers
x264_encoder_intra_refresh
x264_encoder_invalidate_reference
x264_encoder_maximum_delayed_frames
x264_encoder_open_164
x264_encoder_parameters
x264_encoder_reconfig
x264_free
x264_levels
x264_log_default
x264_log_internal
x264_malloc
x264_mdate
x264_nal_encode
x264_param2string
x264_param_apply_fastfirstpass
x264_param_apply_profile
x264_param_cleanup
x264_param_default
x264_param_default_preset
x264_param_parse
x264_picture_alloc
x264_picture_clean
x264_picture_init
x264_reduce_fraction
x264_reduce_fraction64
x264_slurp_file
x264_threading_init

Sections

UPX0
Size: - Virtual size: 2.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 623KB - Virtual size: 624KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 2.6MB

UPX1 Size: 623KB - Virtual size: 624KB

.rsrc Size: 3KB - Virtual size: 4KB

UPX0
Size: - Virtual size: 2.6MB

UPX1
Size: 623KB - Virtual size: 624KB

.rsrc
Size: 3KB - Virtual size: 4KB