1bb3cde2a764cd8fdfde73f0272227be

General

Target

1bb3cde2a764cd8fdfde73f0272227be
Size

87KB
MD5

1bb3cde2a764cd8fdfde73f0272227be
SHA1

a309048d90d32aa7ede1bb880cb1eb6263875cec
SHA256

cc97a79541c8405051474fa62705fb8d44baffcd38cf0d802e24cabe79f179e9
SHA512

491b69d777cb8508c4c4ce7f5d810afe3c58b90c82a7c22233761496de22c063964823fcdca8a5b4d081c592810a4bda03215f37b34e38c731418f5f5179a3f1
SSDEEP

1536:IIqltmQMmxYJ/ySqWQGP7Luxa5JiGOpBlnZa4S6qJBV0eNAA0Tv:tG2/5fP79JsU4NmBVVAA0Tv

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bb3cde2a764cd8fdfde73f0272227be

Files

1bb3cde2a764cd8fdfde73f0272227be
.exe windows:4 windows x86 arch:x86

9c4582f9d83b3a891f37dc9ad9d40204

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

lstrlenA
lstrcmpiA
WritePrivateProfileStringA
WriteFile
SizeofResource
SetFilePointer
SetEndOfFile
ReadFile
MoveFileExA
LockResource
LoadResource
LoadLibraryA
GetVersionExA
GetSystemDirectoryA
GetShortPathNameA
GetProcAddress
GetModuleFileNameA
GetFileSize
FreeResource
FreeLibrary
FindResourceA
FindFirstFileA
FindClose
DeleteFileA
CreateProcessA
CreateFileA
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetVersion
GetCurrentThreadId
GetThreadLocale
GetStartupInfoA
GetModuleFileNameA
GetLocaleInfoA
GetCommandLineA
FreeLibrary
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle

advapi32

RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

user32

GetKeyboardType
MessageBoxA
CharNextA
CreateWindowExA
GetMessageA
FindWindowA
DispatchMessageA

Sections

UPX0
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avp
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9c4582f9d83b3a891f37dc9ad9d40204

Headers

File Characteristics

Imports

kernel32

advapi32

user32

Sections

UPX0 Size: 84KB - Virtual size: 84KB

.rsrc Size: 512B - Virtual size: 4KB

.avp Size: 2KB - Virtual size: 4KB

UPX0
Size: 84KB - Virtual size: 84KB

.rsrc
Size: 512B - Virtual size: 4KB

.avp
Size: 2KB - Virtual size: 4KB