58969c88453d15ca4a33884c3c99bef2

Sharing

Copy URL Twitter E-mail

General

Target

58969c88453d15ca4a33884c3c99bef2
Size

324KB
MD5

58969c88453d15ca4a33884c3c99bef2
SHA1

142d0fc0b2daf8ceb5e5fa2c26c955607671064b
SHA256

0f8f72b2f1e0c2e1e873c4f02aaa8dc3e9d46ef40d1d43f1cac8dc383be73317
SHA512

81e1829eefb5a164cf38d58df8ff895336fb5913d0f5f7b52d923228d8ab7f4920f64589429d99f3338340123847451c72c3e262056425c0f4f4829a1ada64b2
SSDEEP

6144:IYRmzGmQw3XSgzyUfR5XXf8F3DJAah5eYPY8keO1+e+xZSC0:fRmzMGXSgzyUfTXXf8F3tAah5eoLkvA

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58969c88453d15ca4a33884c3c99bef2

Files

58969c88453d15ca4a33884c3c99bef2
.exe windows:5 windows x86 arch:x86

1fe1cde63865e358713fe4ffdcf616b6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_controlfp
_initterm
__getmainargs
_acmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
__setusermatherr
_wtoi
_wtol
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
wcschr
swscanf
wcstoul
_ftol
_purecall

advapi32

RegOpenKeyExW
RegOpenKeyExA
RegOpenKeyA
RegCreateKeyA
RegEnumValueA
RegSetValueExA
RegEnumKeyA
RegCreateKeyExW
RegSetValueExW
RegOpenKeyW
RegQueryValueExW
RegCloseKey
RegCreateKeyW

kernel32

CreateMutexW
SetLastError
GetProcAddress
GetModuleHandleW
lstrcpyW
lstrcmpW
lstrcatW
CloseHandle
WriteFile
MulDiv
Sleep
lstrcmpiW
WriteProfileStringW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleA
GetStartupInfoA
GetLastError
GetCommandLineW
lstrlenW
CreateFileW
GetFileSize
ReadFile
GetVersionExW
GetNumberFormatW

gdi32

TextOutW
RestoreDC
PatBlt
GetTextColor
RealizePalette
ExtTextOutW
BitBlt
CreateCompatibleBitmap
SetLayout
SelectObject
DeleteObject
SetBkColor
SelectPalette
SetTextColor
SetBkMode
CreatePalette
CreateBitmap
CreateCompatibleDC
GetTextMetricsW
DeleteDC
SetTextAlign
Rectangle
GetTextExtentPoint32W
SaveDC
CreateSolidBrush
SetPaletteEntries
GetStockObject
GetNearestColor
GetNearestPaletteIndex
GetPaletteEntries
GetDeviceCaps
CreateFontIndirectW

user32

SetTimer
KillTimer
SetCaretBlinkTime
SwapMouseButton
SetSysColors
SetFocus
GetFocus
GetForegroundWindow
DrawCaptionTempW
SetSysColorsTemp
LoadIconW
EnumDisplaySettingsW
ChangeDisplaySettingsW
SendMessageTimeoutW
FindWindowW
GetWindowRect
MapWindowPoints
SetWindowPos
ShowWindow
SetWindowLongW
LoadStringW
SendMessageW
GetDlgItem
SendDlgItemMessageW
SetDlgItemTextW
wsprintfW
GetWindowLongW
MessageBoxW
ReleaseDC
GetDC
GetDesktopWindow
SystemParametersInfoW
GetWindow
GetDlgCtrlID
GetTopWindow
GetClientRect
HiliteMenuItem
EnableMenuItem
LoadMenuW
OffsetRect
InflateRect
GetSystemMetrics
FillRect
DrawFrameControl
DestroyIcon
DrawTextW
DrawEdge
LoadImageW
InvalidateRect
DefWindowProcW
EndPaint
BeginPaint
GetSysColor
RegisterClassW
LoadCursorW
PostMessageW
GetParent
SetWindowTextW
EnableWindow

comctl32

PropertySheetW
ord17

comdlg32

GetSaveFileNameW

shlwapi

StrTrimW

shell32

ShellExecuteW
ord258

ole32

CoInitialize
CoCreateInstance

uxtheme

IsThemeActive
GetCurrentThemeName
ord4
ord65

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

UPX0
Size: 144KB - Virtual size: 380KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1fe1cde63865e358713fe4ffdcf616b6

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

advapi32

kernel32

gdi32

user32

comctl32

comdlg32

shlwapi

shell32

ole32

uxtheme

Sections

.text Size: 49KB - Virtual size: 49KB

.data Size: 3KB - Virtual size: 38KB

.rsrc Size: 126KB - Virtual size: 126KB

UPX0 Size: 144KB - Virtual size: 380KB

.text
Size: 49KB - Virtual size: 49KB

.data
Size: 3KB - Virtual size: 38KB

.rsrc
Size: 126KB - Virtual size: 126KB

UPX0
Size: 144KB - Virtual size: 380KB