1127c8942b74c54cfb4d228bdaeea7e6

Sharing

Copy URL

Twitter E-mail

General

Target

1127c8942b74c54cfb4d228bdaeea7e6
Size

327KB
MD5

1127c8942b74c54cfb4d228bdaeea7e6
SHA1

46a6d2cd99ee717e03f985696a0e2486d9705905
SHA256

5397ad1e5654ec738732bb51c7dea3afb2b84baa7d2098602c25eb6b32ee36f0
SHA512

248616f49db065f033602e9789ba466e2521139a5291dd3d3a372a810709659967eaaeb1bd356fc237774a72989db7dd9bf9f9e1ecc2a4e0795d1e4aead017d0
SSDEEP

6144:IBxvK3SHSI1SHZX4ok6+6JcgLpZy6pAp+0dTmQl:gvK33QSx4N6+2dvymP4V

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

1127c8942b74c54cfb4d228bdaeea7e6
.exe windows:4 windows x86 arch:x86

Code Sign

68:b6:84:0a:69:0c:71:44:b9:2d:ab:9b:8d:cf:15:90
Certificate

Issuer

CN=gzXW,OU=gzXW Workshop,O=gzXW Workshop

Not Before

31-12-2006 16:00

Not After

31-12-2094 16:00

Subject

CN=gzXW,OU=gzXW Workshop,O=gzXW Workshop

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

d9:e5:b9:bf:e8:d1:a5:01:50:5d:68:58:c7:21:04:14:aa:29:3b:8f
Signer

Actual PE Digest

d9:e5:b9:bf:e8:d1:a5:01:50:5d:68:58:c7:21:04:14:aa:29:3b:8f

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 340KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�
Size: 86KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

68:b6:84:0a:69:0c:71:44:b9:2d:ab:9b:8d:cf:15:90Certificate

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

d9:e5:b9:bf:e8:d1:a5:01:50:5d:68:58:c7:21:04:14:aa:29:3b:8fSigner

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 340KB

UPX1 Size: 204KB - Virtual size: 204KB

.rsrc Size: 33KB - Virtual size: 36KB

� Size: 86KB - Virtual size: 88KB

68:b6:84:0a:69:0c:71:44:b9:2d:ab:9b:8d:cf:15:90
Certificate

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

d9:e5:b9:bf:e8:d1:a5:01:50:5d:68:58:c7:21:04:14:aa:29:3b:8f
Signer

UPX0
Size: - Virtual size: 340KB

UPX1
Size: 204KB - Virtual size: 204KB

.rsrc
Size: 33KB - Virtual size: 36KB

�
Size: 86KB - Virtual size: 88KB