Static task
static1
Behavioral task
behavioral1
Sample
upx.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
upx.exe
Resource
win10v2004-20231215-en
General
-
Target
148eb30b694644a8ae71bda30ee10888
-
Size
849KB
-
MD5
148eb30b694644a8ae71bda30ee10888
-
SHA1
ca7739e843869e73f3726b95c3c3e077673dd7ec
-
SHA256
36dc696349f45e47f491d957b92b092c99c17ae8b83b9521a0da11cd09dfe61e
-
SHA512
2a8b6a7779fb49c95ac87dec83deb4fca74331de8488c64cb045fe0c4dfd7a24be4aa0c1b0d9a870005b971e2b7e4587124399cf280ce6da58869b8bdba2844a
-
SSDEEP
24576:zPEyJ1urb0erTaXLf7Q0/9BbBP8H8LjXL7PULTiCWVU2:zPQr4mTALjQi9Bb+cL7sviS2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/upx.exe
Files
-
148eb30b694644a8ae71bda30ee10888.zip
-
upx.exe.exe windows:5 windows x86 arch:x86
8e0cb664215f8aa98647663e67e6b714
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcp60
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??_7?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBG@Z
??0_Timevec@std@@QAE@ABV01@@Z
?close@?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAEPAV12@XZ
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
_FCosh
?signaling_NaN@?$numeric_limits@C@std@@SACXZ
??Ostd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?_Init@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
??Hstd@@YA?AV?$complex@N@0@ABV10@ABN@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0locale@std@@QAE@W4_Uninitialized@1@@Z
??8std@@YA_NABOABV?$complex@O@0@@Z
?imag@?$_Complex_base@O@std@@QBEOXZ
??1_Timevec@std@@QAE@XZ
?imbue@?$basic_ios@GU?$char_traits@G@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?copyfmt@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEAAV12@ABV12@@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
??1bad_typeid@std@@UAE@XZ
??0?$codecvt@DDH@std@@QAE@ABV_Locinfo@1@I@Z
?_Init@?$numpunct@D@std@@IAEXABV_Locinfo@2@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
_Hugeval
??_0?$_Complex_base@N@std@@QAEAAV01@ABN@Z
?pow@std@@YA?AV?$complex@N@1@ABV21@ABN@Z
?find_last_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
??0?$_Mpunct@D@std@@QAE@I_N@Z
?open@?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXPBDF@Z
??_F?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?norm@std@@YANABV?$complex@N@1@@Z
?polar@std@@YA?AV?$complex@O@1@ABO@Z
?id@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A
?_Init@?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??_7underflow_error@std@@6B@
?pubseekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@V32@H@Z
?put@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@G@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAF@Z
?close@?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAEXXZ
?signaling_NaN@?$numeric_limits@I@std@@SAIXZ
??4?$char_traits@D@std@@QAEAAU01@ABU01@@Z
??4?$numeric_limits@J@std@@QAEAAV01@ABV01@@Z
??0?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
?empty@locale@std@@SA?AV12@XZ
?grouping@?$numpunct@G@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?do_decimal_point@?$_Mpunct@G@std@@MBEGXZ
?copy@?$char_traits@D@std@@SAPADPADPBDI@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIGI@Z
??Kstd@@YA?AV?$complex@O@0@ABOABV10@@Z
?log@std@@YA?AV?$complex@O@1@ABV21@@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IPBDI@Z
??_7?$basic_iostream@GU?$char_traits@G@std@@@std@@6B@
?do_truename@?$numpunct@D@std@@MBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?_Getdays@_Locinfo@std@@QBEPBDXZ
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@PBDH@Z
?get@?$messages@G@std@@QBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@HHHABV32@@Z
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXPAGPBG1@Z
?do_frac_digits@?$_Mpunct@D@std@@MBEHXZ
?do_toupper@?$ctype@G@std@@MBEGG@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
?begin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEPAGXZ
?intl@?$moneypunct@G$00@std@@2_NB
?capacity@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
??9std@@YA_NABOABV?$complex@O@0@@Z
?_Infv@?$_Ctr@N@std@@SANN@Z
?find@?$char_traits@D@std@@SAPBDPBDIABD@Z
??1?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBD@Z
??Hstd@@YA?AV?$complex@N@0@ABV10@0@Z
?sqrt@std@@YA?AV?$complex@N@1@ABV21@@Z
msvcrt40
setlocale
?flags@ios@@QAEJJ@Z
??6ostream@@QAEAAV0@P6AAAVios@@AAV1@@Z@Z
_chmod
_wcslwr
_ismbbalnum
_isnan
_stricoll
_wrmdir
_y1
??4__non_rtti_object@@QAEAAV0@ABV0@@Z
?pcount@strstream@@QBEHXZ
ceil
_getsystime
_dup2
??0bad_cast@@QAE@ABV0@@Z
_adj_fptan
_mbscspn
mblen
__set_app_type
vfwprintf
?get@istream@@QAEAAV1@AAE@Z
_ismbstrail
??1bad_cast@@UAE@XZ
??0ifstream@@QAE@HPADH@Z
calloc
cosh
ntdsapi
DsReplicaVerifyObjectsA
DsaopUnBind
DsInheritSecurityIdentityA
DsReplicaSyncA
DsFreeDomainControllerInfoA
DsReplicaAddW
DsaopPrepareScript
DsReplicaSyncAllW
DsReplicaGetInfo2W
DsMapSchemaGuidsA
DsReplicaGetInfoW
DsaopBindWithCred
DsListServersForDomainInSiteA
DsReplicaFreeInfo
DsCrackNamesW
DsGetRdnW
DsGetSpnA
DsClientMakeSpnForTargetServerW
DsAddSidHistoryA
DsListRolesW
DsServerRegisterSpnA
DsListSitesW
DsaopExecuteScript
DsMakeSpnA
DsReplicaAddA
DsAddSidHistoryW
DsBindWithSpnW
DsInheritSecurityIdentityW
DsRemoveDsDomainW
DsBindWithSpnA
DsReplicaModifyA
DsCrackUnquotedMangledRdnA
DsBindWithCredA
DsReplicaUpdateRefsW
DsMakePasswordCredentialsA
DsBindA
DsBindW
DsUnBindA
DsMapSchemaGuidsW
DsServerRegisterSpnW
DsListServersInSiteW
kernel32
CreateWaitableTimerW
lstrcmpiW
GlobalMemoryStatus
lstrcpynA
LeaveCriticalSection
CreateJobObjectW
InitializeCriticalSection
SetErrorMode
GetConsoleHardwareState
ScrollConsoleScreenBufferW
CreateProcessInternalW
FillConsoleOutputCharacterA
GlobalAddAtomW
FlushInstructionCache
SetLocaleInfoW
GetConsoleCP
VirtualAlloc
WriteProfileStringA
OutputDebugStringW
CreatePipe
WritePrivateProfileStringA
SetConsoleCtrlHandler
FindFirstVolumeMountPointW
LocalUnlock
WaitForMultipleObjects
CommConfigDialogA
LZCreateFileW
LoadLibraryA
DeleteCriticalSection
AllocConsole
Beep
GetFileAttributesA
lstrlenA
GetLocalTime
OpenConsoleW
lstrcatA
GetGeoInfoA
GetFileAttributesExA
IsValidCodePage
GetBinaryTypeA
GetComputerNameExA
GetConsoleCommandHistoryLengthA
BeginUpdateResourceW
EnumSystemLanguageGroupsW
HeapReAlloc
SetComputerNameExA
SetNamedPipeHandleState
VerifyVersionInfoA
FileTimeToDosDateTime
GetSystemDefaultLCID
QueryActCtxW
SetThreadLocale
FlushFileBuffers
SetThreadIdealProcessor
BackupRead
EnterCriticalSection
VirtualLock
SetTimerQueueTimer
Thread32First
FindVolumeClose
GetNumberOfConsoleMouseButtons
GetCalendarInfoW
OpenMutexW
ShowConsoleCursor
SetFileAttributesW
FileTimeToSystemTime
SetCurrentDirectoryA
GetNumberFormatW
SetFilePointer
WriteConsoleInputVDMA
GetPriorityClass
lstrcat
MoveFileExA
opengl32
glMapGrid1f
glTexCoord2iv
glColor4f
glColor3b
wglGetCurrentContext
wglSwapBuffers
glRectdv
glTexParameterf
glColor4dv
glStencilFunc
glRasterPos2i
glColor3bv
glRasterPos3fv
glShadeModel
glGetMapiv
glColor4fv
glFlush
glTexCoord2dv
glMaterialiv
glAccum
wglDescribeLayerPlane
glGetMaterialfv
glRasterPos4s
glEdgeFlagPointer
glTexCoord2s
glGetTexEnvfv
wglMakeCurrent
glColor4i
glCopyTexImage2D
glMaterialfv
glDrawArrays
user32
CharUpperBuffA
SetCursor
SystemParametersInfoW
CtxInitUser32
DdeConnect
GetUserObjectInformationA
ToUnicodeEx
SetKeyboardState
ChangeMenuW
UnhookWindowsHook
GetDlgItemTextW
GetClipboardData
OemKeyScan
KillTimer
ToUnicode
EnumPropsExA
CharNextA
GetClipCursor
LoadMenuA
SendMessageW
RegisterSystemThread
GetCaretPos
RegisterWindowMessageA
GrayStringA
SwitchDesktop
ChangeDisplaySettingsW
IsChild
PrivateExtractIconsA
LoadStringA
SetForegroundWindow
MoveWindow
DdeGetQualityOfService
GetWindowRgnBox
DdeDisconnectList
GetScrollBarInfo
msvcrt
exit
Sections
.text Size: 157KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 334KB - Virtual size: 333KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 372KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ