41236c52d3d38696893d1bc0e02422b5

General

Target
41236c52d3d38696893d1bc0e02422b5
Size 964KB
Sample231225-2qa1asdgh5
SHA256 f861b65cf90fead4f7333a49b3fd57ad4e0cbfc5b96d4d496a306ad130c3f16e
MD5 41236c52d3d38696893d1bc0e02422b5
SHA1 7478e558ea950025e50feb69e25f56209b335808
SHA512 944c25e2d90b1852c18fa51bc166d9b2836ac036f4a9f037b80619fb3a4138770685ea32f53828e6e7cc033cbfd198b1341057c5a429a0423ea668b91a3e6884
SSDEEP 24576:dJAESbzBP2YDI0NMNc3BFPZubPI7rhEy1YUN6qCeUVPo:DADnSbPI7rhR1/AqC
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
41236c52d3d38696893d1bc0e02422b5
unpack001/out.upx

File Explorer

41236c52d3d38696893d1bc0e02422b5

.exe 964KB
out.upx

.exe 3.6MB

41236c52d3d38696893d1bc0e02422b5

SHA256 f861b65cf90fead4f7333a49b3fd57ad4e0cbfc5b96d4d496a306ad130c3f16e
MD5 41236c52d3d38696893d1bc0e02422b5
SHA1 7478e558ea950025e50feb69e25f56209b335808
SHA512 944c25e2d90b1852c18fa51bc166d9b2836ac036f4a9f037b80619fb3a4138770685ea32f53828e6e7cc033cbfd198b1341057c5a429a0423ea668b91a3e6884
SSDEEP 24576:dJAESbzBP2YDI0NMNc3BFPZubPI7rhEy1YUN6qCeUVPo:DADnSbPI7rhR1/AqC
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5247840

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

out.upx

SHA256 ec852190026893de5d26981311985427072fb0730510638b4d1f290038510ee4
MD5 0a130d37fd9d60b1a277245b6d7e4c86
SHA1 e581a166e84c5c8dbad873403cb18792a018d0d4
SHA512 95b7ac315c6cd7c856a4c61a161417d80fbadd204f7fdbcba4da21afaddc88e316594f33ef0f4fbb704568f25dbd70cbba153d052c49f005b43adf30ad6fb190
SSDEEP 24576:Pk4fPeJ+yKZECFZxTyvOmeAvDosa+97qhhOJlzWY5X5QDnLXbU/7vRVZXP+gewFR:Pk4fWJwNgDosl3znELXQ7ZhR
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

642204

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

706KB

Virtual Size

708KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

216KB

Virtual Size

220KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

13KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text1

Size

704KB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.9MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.maze

Size

44KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

41236c52d3d38696893d1bc0e02422b5

generic

out.upx

generic

Sharing

General

Malware Config

Signatures

File Explorer

41236c52d3d38696893d1bc0e02422b5

generic

out.upx

generic