0d164dff14cb763a18cf8ef8f10921ba

Sharing

Copy URL

Twitter E-mail

General

Target

0d164dff14cb763a18cf8ef8f10921ba
Size

898KB
MD5

0d164dff14cb763a18cf8ef8f10921ba
SHA1

bc1323ce172e6bc77a52c6ca7ba1b933a4a503cb
SHA256

e66de485060bed99720d4c7e00e5e6b1b6208b77fa343dd53e1dd4efde947b27
SHA512

7b6fc0cd2b77fe3ddf16d715675597c603dbd1c8e22c3de9e73cf4816eac723b7cd842655a3d7209c469fed3d7b4d47c72e6992f486084ea35248e2398c4fc82
SSDEEP

24576:3g+Og2KvM/o6rUVumCqRVdV5T/SH0z/5o51koyk:3SlorVdzT6H0jucoyk

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
0d164dff14cb763a18cf8ef8f10921ba
unpack001/out.upx

Files

0d164dff14cb763a18cf8ef8f10921ba
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 10.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 793KB - Virtual size: 796KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 562KB - Virtual size: 562KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.poly
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zero
Size: - Virtual size: 4.4MB

.as_0001
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zero
Size: - Virtual size: 1.2MB

.as_0002
Size: 258KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zero
Size: - Virtual size: 56KB

.as_0003
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zero
Size: - Virtual size: 128KB

.as_0005
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zero
Size: - Virtual size: 16KB

.as_0006
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zero
Size: - Virtual size: 64KB

.as_0008
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zero
Size: - Virtual size: 672KB

.as_000a
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zero
Size: - Virtual size: 60KB

.as_000b
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zero
Size: - Virtual size: 60KB

.as_000c
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zero
Size: - Virtual size: 60KB

.as_000d
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zero
Size: - Virtual size: 60KB

.as_000e
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zero
Size: - Virtual size: 60KB

.as_000f
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zero
Size: - Virtual size: 60KB

.as_0010
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zero
Size: - Virtual size: 60KB

.as_0011
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zero
Size: - Virtual size: 60KB

.as_0012
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zero
Size: - Virtual size: 60KB

.as_0013
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zero
Size: - Virtual size: 60KB

.as_0014
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zero
Size: - Virtual size: 60KB

.as_0015
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zero
Size: - Virtual size: 60KB

.as_0016
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zero
Size: - Virtual size: 60KB

.as_0017
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zero
Size: - Virtual size: 60KB

.as_0018
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zero
Size: - Virtual size: 60KB

.as_0019
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zero
Size: - Virtual size: 60KB

.as_001a
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zero
Size: - Virtual size: 48KB

.as_001b
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zero
Size: - Virtual size: 56KB

.as_001c
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zero
Size: - Virtual size: 60KB

.as_001d
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zero
Size: - Virtual size: 60KB

.as_001e
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zero
Size: - Virtual size: 60KB

.as_001f
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zero
Size: - Virtual size: 60KB

.as_0020
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zero
Size: - Virtual size: 60KB

.as_0021
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zero
Size: - Virtual size: 60KB

.as_0022
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zero
Size: - Virtual size: 60KB

.as_0023
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zero
Size: - Virtual size: 60KB

.as_0024
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 10.1MB

UPX1 Size: 793KB - Virtual size: 796KB

.rsrc Size: 104KB - Virtual size: 104KB

Headers

File Characteristics

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.data Size: 21KB - Virtual size: 24KB

Size: - Virtual size: 304KB

Size: 11KB - Virtual size: 12KB

Size: - Virtual size: 4KB

Size: 512B - Virtual size: 4KB

Size: - Virtual size: 72KB

.rsrc Size: 562KB - Virtual size: 562KB

.poly Size: 4KB - Virtual size: 8KB

.idata Size: 13KB - Virtual size: 16KB

.zero Size: - Virtual size: 4.4MB

.as_0001 Size: 512B - Virtual size: 4KB

.zero Size: - Virtual size: 1.2MB

.as_0002 Size: 258KB - Virtual size: 264KB

.zero Size: - Virtual size: 56KB

.as_0003 Size: 80KB - Virtual size: 80KB

.zero Size: - Virtual size: 128KB

.as_0005 Size: 16KB - Virtual size: 16KB

.zero Size: - Virtual size: 16KB

.as_0006 Size: 16KB - Virtual size: 16KB

.zero Size: - Virtual size: 64KB

.as_0008 Size: 32KB - Virtual size: 32KB

.zero Size: - Virtual size: 672KB

.as_000a Size: 512B - Virtual size: 4KB

.zero Size: - Virtual size: 60KB

.as_000b Size: 512B - Virtual size: 4KB

.zero Size: - Virtual size: 60KB

.as_000c Size: 512B - Virtual size: 4KB

.zero Size: - Virtual size: 60KB

.as_000d Size: 512B - Virtual size: 4KB

.zero Size: - Virtual size: 60KB

.as_000e Size: 512B - Virtual size: 4KB

.zero Size: - Virtual size: 60KB

.as_000f Size: 512B - Virtual size: 4KB

.zero Size: - Virtual size: 60KB

.as_0010 Size: 512B - Virtual size: 4KB

.zero Size: - Virtual size: 60KB

.as_0011 Size: 512B - Virtual size: 4KB

.zero Size: - Virtual size: 60KB

.as_0012 Size: 512B - Virtual size: 4KB

.zero Size: - Virtual size: 60KB

.as_0013 Size: 512B - Virtual size: 4KB

.zero Size: - Virtual size: 60KB

.as_0014 Size: 512B - Virtual size: 4KB

.zero Size: - Virtual size: 60KB

.as_0015 Size: 512B - Virtual size: 4KB

.zero Size: - Virtual size: 60KB

.as_0016 Size: 512B - Virtual size: 4KB

.zero Size: - Virtual size: 60KB

.as_0017 Size: 512B - Virtual size: 4KB

.zero Size: - Virtual size: 60KB

.as_0018 Size: 512B - Virtual size: 4KB

.zero Size: - Virtual size: 60KB

.as_0019 Size: 512B - Virtual size: 4KB

.zero Size: - Virtual size: 60KB

.as_001a Size: 15KB - Virtual size: 16KB

.zero Size: - Virtual size: 48KB

.as_001b Size: 8KB - Virtual size: 8KB

.zero Size: - Virtual size: 56KB

.as_001c Size: 512B - Virtual size: 4KB

.zero Size: - Virtual size: 60KB

.as_001d Size: 512B - Virtual size: 4KB

.zero Size: - Virtual size: 60KB

.as_001e Size: 512B - Virtual size: 4KB

.zero Size: - Virtual size: 60KB

.as_001f Size: 512B - Virtual size: 4KB

UPX0
Size: - Virtual size: 10.1MB

UPX1
Size: 793KB - Virtual size: 796KB

.rsrc
Size: 104KB - Virtual size: 104KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.data
Size: 21KB - Virtual size: 24KB

.rsrc
Size: 562KB - Virtual size: 562KB

.poly
Size: 4KB - Virtual size: 8KB

.idata
Size: 13KB - Virtual size: 16KB

.zero
Size: - Virtual size: 4.4MB

.as_0001
Size: 512B - Virtual size: 4KB

.zero
Size: - Virtual size: 1.2MB

.as_0002
Size: 258KB - Virtual size: 264KB

.zero
Size: - Virtual size: 56KB

.as_0003
Size: 80KB - Virtual size: 80KB

.zero
Size: - Virtual size: 128KB

.as_0005
Size: 16KB - Virtual size: 16KB

.zero
Size: - Virtual size: 16KB

.as_0006
Size: 16KB - Virtual size: 16KB

.zero
Size: - Virtual size: 64KB

.as_0008
Size: 32KB - Virtual size: 32KB

.zero
Size: - Virtual size: 672KB

.as_000a
Size: 512B - Virtual size: 4KB

.zero
Size: - Virtual size: 60KB

.as_000b
Size: 512B - Virtual size: 4KB

.zero
Size: - Virtual size: 60KB

.as_000c
Size: 512B - Virtual size: 4KB

.zero
Size: - Virtual size: 60KB

.as_000d
Size: 512B - Virtual size: 4KB

.zero
Size: - Virtual size: 60KB

.as_000e
Size: 512B - Virtual size: 4KB

.zero
Size: - Virtual size: 60KB

.as_000f
Size: 512B - Virtual size: 4KB

.zero
Size: - Virtual size: 60KB

.as_0010
Size: 512B - Virtual size: 4KB

.zero
Size: - Virtual size: 60KB

.as_0011
Size: 512B - Virtual size: 4KB

.zero
Size: - Virtual size: 60KB

.as_0012
Size: 512B - Virtual size: 4KB

.zero
Size: - Virtual size: 60KB

.as_0013
Size: 512B - Virtual size: 4KB

.zero
Size: - Virtual size: 60KB

.as_0014
Size: 512B - Virtual size: 4KB

.zero
Size: - Virtual size: 60KB

.as_0015
Size: 512B - Virtual size: 4KB

.zero
Size: - Virtual size: 60KB

.as_0016
Size: 512B - Virtual size: 4KB

.zero
Size: - Virtual size: 60KB

.as_0017
Size: 512B - Virtual size: 4KB

.zero
Size: - Virtual size: 60KB

.as_0018
Size: 512B - Virtual size: 4KB

.zero
Size: - Virtual size: 60KB

.as_0019
Size: 512B - Virtual size: 4KB

.zero
Size: - Virtual size: 60KB

.as_001a
Size: 15KB - Virtual size: 16KB

.zero
Size: - Virtual size: 48KB

.as_001b
Size: 8KB - Virtual size: 8KB

.zero
Size: - Virtual size: 56KB

.as_001c
Size: 512B - Virtual size: 4KB

.zero
Size: - Virtual size: 60KB

.as_001d
Size: 512B - Virtual size: 4KB

.zero
Size: - Virtual size: 60KB

.as_001e
Size: 512B - Virtual size: 4KB

.zero
Size: - Virtual size: 60KB

.as_001f
Size: 512B - Virtual size: 4KB

.zero
Size: - Virtual size: 60KB

.as_0020
Size: 1KB - Virtual size: 4KB

.zero
Size: - Virtual size: 60KB

.as_0021
Size: 1KB - Virtual size: 4KB

.zero
Size: - Virtual size: 60KB

.as_0022
Size: 1KB - Virtual size: 4KB

.zero
Size: - Virtual size: 60KB

.as_0023
Size: 512B - Virtual size: 4KB

.zero
Size: - Virtual size: 60KB

.as_0024
Size: 512B - Virtual size: 4KB