078f38a7fafdb6b2f0945e314c580dce

Sharing

Copy URL

Twitter E-mail

General

Target

078f38a7fafdb6b2f0945e314c580dce
Size

203KB
MD5

078f38a7fafdb6b2f0945e314c580dce
SHA1

633adec9e55e2d6061a0b301b08399fcc47fe9e4
SHA256

c4824d883e6c6d8c9b299790cc8a825ec360cb45e349576a50231c10fb4696ca
SHA512

25f5b6f1213303569f25082ecca3b9eb995dd2fcae31f8a7dd1002359a965bfa7213211b10c057a7451f6fc2a2602e689ba3905c51c651000b308110a49b7e73
SSDEEP

6144:pat5mfY1v17K8O/NN3fGIr0U4CZa8HSsqzB:prY1vNYNJfGIQ7kacSdzB

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
078f38a7fafdb6b2f0945e314c580dce

Files

078f38a7fafdb6b2f0945e314c580dce
.exe windows:4 windows x86 arch:x86

0378c7d64285f5c0c33db53176c1354d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

avcodec-52

audio_resample
audio_resample_close
av_audio_convert
av_audio_convert_alloc
av_audio_convert_free
av_audio_resample_init
av_bitstream_filter_filter
av_bitstream_filter_init
av_bitstream_filter_next
av_codec_next
av_destruct_packet
av_fast_malloc
av_find_opt
av_free_packet
av_get_bits_per_sample
av_get_bits_per_sample_format
av_get_int
av_get_pict_type_char
av_get_string
av_init_packet
av_opt_show
av_parse_video_frame_rate
av_parse_video_frame_size
av_parser_change
av_picture_crop
av_picture_pad
av_resample_compensate
av_set_string3
avcodec_alloc_context
avcodec_alloc_context2
avcodec_channel_layout_num_channels
avcodec_close
avcodec_configuration
avcodec_decode_audio3
avcodec_decode_subtitle2
avcodec_decode_video2
avcodec_encode_audio
avcodec_encode_subtitle
avcodec_encode_video
avcodec_find_decoder
avcodec_find_decoder_by_name
avcodec_find_encoder
avcodec_find_encoder_by_name
avcodec_get_context_defaults2
avcodec_get_frame_defaults
avcodec_get_pix_fmt_name
avcodec_get_sample_fmt
avcodec_get_sample_fmt_name
avcodec_open
avcodec_register_all
avcodec_sample_fmt_string
avcodec_thread_init
avcodec_version
avpicture_alloc
avpicture_deinterlace
avpicture_fill
avpicture_get_size

avdevice-52

avdevice_configuration
avdevice_register_all
avdevice_version

avfilter-1

av_filter_next
avfilter_configuration
avfilter_version

avformat-52

av_close_input_file
av_codec_get_id
av_codec_get_tag
av_filename_number_test
av_find_input_format
av_find_stream_info
av_gettime
av_guess_codec
av_guess_format
av_iformat_next
av_interleaved_write_frame
av_metadata_conv
av_metadata_free
av_metadata_get
av_metadata_set
av_new_stream
av_oformat_next
av_open_input_file
av_pkt_dump_log
av_protocol_next
av_read_frame
av_register_all
av_seek_frame
av_set_parameters
av_write_header
av_write_trailer
avf_sdp_create
avformat_alloc_context
avformat_configuration
avformat_version
dump_format
parse_date
url_exist
url_fclose
url_fopen
url_fsize
url_ftell
url_set_interrupt_cb

avutil-50

av_compare_ts
av_d2q
av_fifo_alloc
av_fifo_free
av_fifo_generic_read
av_fifo_generic_write
av_fifo_realloc2
av_fifo_size
av_find_nearest_q_idx
av_free
av_freep
av_get_bits_per_pixel
av_get_pix_fmt
av_log_set_callback
av_log_set_level
av_malloc
av_mallocz
av_pix_fmt_descriptors
av_realloc
av_rescale
av_rescale_q
av_strdup
av_strlcat
av_strlcpy
av_strstart
avutil_configuration
avutil_version
av_pix_fmt_descriptors
av_pix_fmt_descriptors

postproc-51

postproc_configuration
postproc_version

swscale-0

sws_freeContext
sws_getContext
sws_isSupportedInput
sws_isSupportedOutput
sws_scale
swscale_configuration
swscale_version

kernel32

AddAtomA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindAtomA
GetAtomNameA
GetCurrentProcess
GetModuleHandleA
GetProcAddress
GetProcessTimes
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
WideCharToMultiByte

msvcrt

_getch
_isatty
_kbhit
__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_errno
_filbuf
_iob
_onexit
_setmode
abort
atexit
atof
atoi
exit
fclose
fflush
fopen
fputc
fread
free
fscanf
fseek
ftell
getenv
localeconv
localtime
log
malloc
perror
signal
sscanf
strchr
strcmp
strerror
strlen
strncmp
strtol
time
toupper
wcslen

psapi

GetProcessMemoryInfo

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 77KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.UPX0
Size: 104KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0378c7d64285f5c0c33db53176c1354d

Headers

File Characteristics

Imports

avcodec-52

avdevice-52

avfilter-1

avformat-52

avutil-50

postproc-51

swscale-0

kernel32

msvcrt

psapi

Sections

.text Size: 72KB - Virtual size: 72KB

.data Size: 512B - Virtual size: 192B

.rdata Size: 18KB - Virtual size: 17KB

.bss Size: - Virtual size: 77KB

.idata Size: 7KB - Virtual size: 6KB

.UPX0 Size: 104KB - Virtual size: 252KB

.text
Size: 72KB - Virtual size: 72KB

.data
Size: 512B - Virtual size: 192B

.rdata
Size: 18KB - Virtual size: 17KB

.bss
Size: - Virtual size: 77KB

.idata
Size: 7KB - Virtual size: 6KB

.UPX0
Size: 104KB - Virtual size: 252KB