113a7a2ef903c8a9ebf19a7e01cb72a2

General

Target

113a7a2ef903c8a9ebf19a7e01cb72a2
Size

119KB
MD5

113a7a2ef903c8a9ebf19a7e01cb72a2
SHA1

1c655c790699043bbc7acfc4eb9cd8d84100ee98
SHA256

f505ca6e2edc66693213d8ddc79a69f6c1fdc904bbc7b529f4889f43566aef00
SHA512

554e1cf20698e2107a574e0e871e4b688add8d9832a9b052711adf8b3dcec1b3fa7aef7d8e5de43d08bbb18210d1fd3b0d9df07f8ad3550304ae78978c469392
SSDEEP

3072:YbEg/fD9DrRaU6Bob1mSPf8srBVn/MflmRkpAF0qmOc6+nCusBlVGHLukf9/wZlj:7gZDFaU6Bob1mSPf8srBVn/MflmRkpAt

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
113a7a2ef903c8a9ebf19a7e01cb72a2

Files

113a7a2ef903c8a9ebf19a7e01cb72a2
.exe windows:4 windows x86 arch:x86

8665e499b2490797b6f5ed6c9b1a8c91

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

WriteFile
SizeofResource
SetFileAttributesA
MapViewOfFile
LockResource
LoadResource
LoadLibraryA
GetWindowsDirectoryA
GetSystemDirectoryA
GetProcAddress
GetLastError
FreeResource
FindResourceA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExitProcess
DeleteFileA
CreateSemaphoreA
CreateFileMappingA
CreateFileA
CopyFileA
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetVersion
GetCurrentThreadId
GetThreadLocale
GetStartupInfoA
GetModuleFileNameA
GetLocaleInfoA
GetCommandLineA
FreeLibrary
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle

advapi32

RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

user32

GetKeyboardType
MessageBoxA
CharNextA
GetMessageA

Sections

UPX0
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8665e499b2490797b6f5ed6c9b1a8c91

Headers

File Characteristics

Imports

kernel32

advapi32

user32

Sections

UPX0 Size: 116KB - Virtual size: 116KB

.rsrc Size: 512B - Virtual size: 4KB

.avc Size: 1KB - Virtual size: 4KB

UPX0
Size: 116KB - Virtual size: 116KB

.rsrc
Size: 512B - Virtual size: 4KB

.avc
Size: 1KB - Virtual size: 4KB