7b03e22b154b51434b5e32bd8612350a3503d9ba7837b374af724ee36c7df0f0[.]exe[.]zip

General

Target

7b03e22b154b51434b5e32bd8612350a3503d9ba7837b374af724ee36c7df0f0.exe.zip
Size

197KB
MD5

0f109e9c8c8b69b9da849801c32a72bb
SHA1

665c303dac7ea9ca48c7865c8b055dca595e991a
SHA256

49def4563e3fcdb9bc9107d3c67c2e1bfddefa180513f283eba7976030b3cfe8
SHA512

fa2d539a3a7b376cbc074a34df4deabfa2e2cb511f85603ae6ea8d8696b23a7fd6547bf70c73fec54ff9d480105b56e77dc3488b6e5fd2117feda09a7ef631ea
SSDEEP

3072:EI8tocFyoS1zDTStFjpaCtRJRF2ZWSqhZ1evuBDeGpucPvoCDfJE88D0+2QgSCyJ:kHADa0oWchZu0Dfp6PjAO

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/7b03e22b154b51434b5e32bd8612350a3503d9ba7837b374af724ee36c7df0f0.exe	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/7b03e22b154b51434b5e32bd8612350a3503d9ba7837b374af724ee36c7df0f0.exe
unpack002/out.upx

Files

7b03e22b154b51434b5e32bd8612350a3503d9ba7837b374af724ee36c7df0f0.exe.zip
.zip

Password: infected
7b03e22b154b51434b5e32bd8612350a3503d9ba7837b374af724ee36c7df0f0.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 340KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 193KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 432KB - Virtual size: 431KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 340KB

UPX1 Size: 193KB - Virtual size: 196KB

.rsrc Size: 9KB - Virtual size: 12KB

Headers

File Characteristics

Sections

CODE Size: 432KB - Virtual size: 431KB

DATA Size: 5KB - Virtual size: 4KB

BSS Size: - Virtual size: 2KB

.idata Size: 9KB - Virtual size: 8KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 29KB - Virtual size: 29KB

.rsrc Size: 25KB - Virtual size: 25KB

UPX0
Size: - Virtual size: 340KB

UPX1
Size: 193KB - Virtual size: 196KB

.rsrc
Size: 9KB - Virtual size: 12KB

CODE
Size: 432KB - Virtual size: 431KB

DATA
Size: 5KB - Virtual size: 4KB

BSS
Size: - Virtual size: 2KB

.idata
Size: 9KB - Virtual size: 8KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 29KB - Virtual size: 29KB

.rsrc
Size: 25KB - Virtual size: 25KB