3ca919d8e248c96baf17c3fcdb78f690

Sharing

Copy URL Twitter E-mail

General

Target

3ca919d8e248c96baf17c3fcdb78f690
Size

94KB
MD5

3ca919d8e248c96baf17c3fcdb78f690
SHA1

31362beddbff594566d80eb49ea9002f6e441d3c
SHA256

ecd794114f92560f46af3d28c030cf0c7424843bd73590cc3d226f2f61058158
SHA512

9214e568c5bfa7891f8f64120cdfe48190240e426f464c22980d01e1d88e4fbbce8c7eec60f70dbea5b3156827873d408b4c580942308c89b7338e7abd89e640
SSDEEP

1536:/nMQu4nBGYml/d9Bx7CbV96QZwuMI++/XPNw:/nP3BGYJX5m

Score

7^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
3ca919d8e248c96baf17c3fcdb78f690
unpack001/out.upx

Files

3ca919d8e248c96baf17c3fcdb78f690
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

common_pict_add_cached_pixbuf
common_pict_adjust_menu_sensitiveness
common_pict_clear_pixbuf_cache
common_pict_create_menu
common_pict_fetch_cached_pixbuf
common_pict_get_value
common_pict_init_cache
common_pict_load_data
common_pict_make_pixbuf
common_pict_parse_options
gnome_db_data_cell_renderer_cgrid_get_data_handler
gnome_db_data_cell_renderer_cgrid_get_editable
gnome_db_data_cell_renderer_cgrid_get_gtype
gnome_db_data_cell_renderer_cgrid_get_options
gnome_db_data_cell_renderer_cgrid_get_to_be_deleted
gnome_db_data_cell_renderer_cgrid_get_type
gnome_db_data_cell_renderer_cgrid_get_value
gnome_db_data_cell_renderer_cgrid_get_value_attributes
gnome_db_data_cell_renderer_cgrid_new
gnome_db_data_cell_renderer_cgrid_set_data_handler
gnome_db_data_cell_renderer_cgrid_set_editable
gnome_db_data_cell_renderer_cgrid_set_gtype
gnome_db_data_cell_renderer_cgrid_set_options
gnome_db_data_cell_renderer_cgrid_set_to_be_deleted
gnome_db_data_cell_renderer_cgrid_set_value
gnome_db_data_cell_renderer_cgrid_set_value_attributes
gnome_db_data_cell_renderer_pict_get_type
gnome_db_data_cell_renderer_pict_new
gnome_db_entry_cgrid_append_column
gnome_db_entry_cgrid_get_active_iter
gnome_db_entry_cgrid_get_grid_height
gnome_db_entry_cgrid_get_headers_visible
gnome_db_entry_cgrid_get_model
gnome_db_entry_cgrid_get_text_column
gnome_db_entry_cgrid_get_type
gnome_db_entry_cgrid_new
gnome_db_entry_cgrid_set_grid_height
gnome_db_entry_cgrid_set_headers_visible
gnome_db_entry_cgrid_set_model
gnome_db_entry_cgrid_set_text_column
gnome_db_entry_cidr_get_type
gnome_db_entry_cidr_new
gnome_db_entry_filesel_get_type
gnome_db_entry_filesel_new
gnome_db_entry_pict_get_type
gnome_db_entry_pict_new
gnome_db_entry_text_get_type
gnome_db_entry_text_new
plugin_init

Sections

UPX0
Size: - Virtual size: 100KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 384B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 32B

IMAGE_SCN_MEM_DISCARDABLE

/19
Size: 512B - Virtual size: 63B

IMAGE_SCN_MEM_DISCARDABLE

/35
Size: 1024B - Virtual size: 1022B

IMAGE_SCN_MEM_DISCARDABLE

/47
Size: 512B - Virtual size: 300B

IMAGE_SCN_MEM_DISCARDABLE

/61
Size: 1024B - Virtual size: 519B

IMAGE_SCN_MEM_DISCARDABLE

/73
Size: 512B - Virtual size: 152B

IMAGE_SCN_MEM_DISCARDABLE

/86
Size: 512B - Virtual size: 494B

IMAGE_SCN_MEM_DISCARDABLE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 100KB

UPX1 Size: 21KB - Virtual size: 24KB

UPX2 Size: 3KB - Virtual size: 4KB

Headers

File Characteristics

Sections

.text Size: 40KB - Virtual size: 40KB

.data Size: 512B - Virtual size: 20B

.rdata Size: 8KB - Virtual size: 7KB

.bss Size: - Virtual size: 384B

.edata Size: 2KB - Virtual size: 2KB

.idata Size: 11KB - Virtual size: 11KB

.reloc Size: 2KB - Virtual size: 2KB

/4 Size: 512B - Virtual size: 32B

/19 Size: 512B - Virtual size: 63B

/35 Size: 1024B - Virtual size: 1022B

/47 Size: 512B - Virtual size: 300B

/61 Size: 1024B - Virtual size: 519B

/73 Size: 512B - Virtual size: 152B

/86 Size: 512B - Virtual size: 494B

UPX0
Size: - Virtual size: 100KB

UPX1
Size: 21KB - Virtual size: 24KB

UPX2
Size: 3KB - Virtual size: 4KB

.text
Size: 40KB - Virtual size: 40KB

.data
Size: 512B - Virtual size: 20B

.rdata
Size: 8KB - Virtual size: 7KB

.bss
Size: - Virtual size: 384B

.edata
Size: 2KB - Virtual size: 2KB

.idata
Size: 11KB - Virtual size: 11KB

.reloc
Size: 2KB - Virtual size: 2KB

/4
Size: 512B - Virtual size: 32B

/19
Size: 512B - Virtual size: 63B

/35
Size: 1024B - Virtual size: 1022B

/47
Size: 512B - Virtual size: 300B

/61
Size: 1024B - Virtual size: 519B

/73
Size: 512B - Virtual size: 152B

/86
Size: 512B - Virtual size: 494B