d2b64499a6c876417507406c3dc177d69ebf5694925629b95cc43ba9af5d4f7a[.]exe[.]compressed

General

Target

d2b64499a6c876417507406c3dc177d69ebf5694925629b95cc43ba9af5d4f7a.exe.compressed
Size

442KB
MD5

ccdc3e74644f3e88407eec4d8f95c0a7
SHA1

b0cc165c3ae219b473a6522c80df6ac3cc5a1685
SHA256

8926e2069b7319a7e924150de7b4e9656a020d133d231693d06f5ccef302800c
SHA512

517ea3798b85e35cbba42a16714eac5d135de52ca33732ac886160a5a16b66b26a5c6ab88d2e762b2e58df5bfb9e2ef621e4edf14f29a2f513eb4404031f1cd6
SSDEEP

6144:CiMjX3En9o3Chide4wlP5HrJTaRGDVdc:Cr3E9bhKeFlPaRa/

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
d2b64499a6c876417507406c3dc177d69ebf5694925629b95cc43ba9af5d4f7a.exe.compressed
unpack001/out.upx

Files

d2b64499a6c876417507406c3dc177d69ebf5694925629b95cc43ba9af5d4f7a.exe.compressed
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 592KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 253KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 232KB - Virtual size: 231KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 85KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 253KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 592KB

UPX1 Size: 188KB - Virtual size: 188KB

.rsrc Size: 253KB - Virtual size: 256KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 232KB - Virtual size: 231KB

.rdata Size: 117KB - Virtual size: 116KB

.data Size: 85KB - Virtual size: 132KB

.gfids Size: 3KB - Virtual size: 2KB

.rsrc Size: 253KB - Virtual size: 252KB

.reloc Size: 15KB - Virtual size: 15KB

UPX0
Size: - Virtual size: 592KB

UPX1
Size: 188KB - Virtual size: 188KB

.rsrc
Size: 253KB - Virtual size: 256KB

.text
Size: 232KB - Virtual size: 231KB

.rdata
Size: 117KB - Virtual size: 116KB

.data
Size: 85KB - Virtual size: 132KB

.gfids
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 253KB - Virtual size: 252KB

.reloc
Size: 15KB - Virtual size: 15KB