98ee51251bcf48286e4bf2b54316fb3d7ab961c299d37f90366a308e52b9fe61

Sharing

Copy URL Twitter E-mail

General

Target

98ee51251bcf48286e4bf2b54316fb3d7ab961c299d37f90366a308e52b9fe61
Size

4.7MB
MD5

38ddf86ab178a30646068617c6cdf13d
SHA1

edfad8a0696d97a95fed0e331764d23e738aad3b
SHA256

98ee51251bcf48286e4bf2b54316fb3d7ab961c299d37f90366a308e52b9fe61
SHA512

79c1f20339b27386ad68e8c43abd837bad10aba29a315c4ab3908de05505aad95895c0a937e93db8e14a46440a720338406d94aedc130ab0dda282f94d436ee3
SSDEEP

98304:1g1FhU30IXipuIduttyV2/A2P+kfrljdeoWHZTs7uEW9E7wKscKx0AmY:C1FikIXipu/6t4jdeoWHZs7uEnpscKeC

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

98ee51251bcf48286e4bf2b54316fb3d7ab961c299d37f90366a308e52b9fe61
.exe windows:6 windows x64 arch:x64

Code Sign

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:32

Not After

01/09/2022, 18:32

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

55:66:68:31:1d:d3:a8:ed:5a:65:5a:95:0e:0f:76:cd:53:72:a9:b8:51:ef:f0:75:88:6a:76:36:e2:f3:c2:be
Signer

Actual PE Digest

55:66:68:31:1d:d3:a8:ed:5a:65:5a:95:0e:0f:76:cd:53:72:a9:b8:51:ef:f0:75:88:6a:76:36:e2:f3:c2:be

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

UPX0
Size: - Virtual size: 548KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 420KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

55:66:68:31:1d:d3:a8:ed:5a:65:5a:95:0e:0f:76:cd:53:72:a9:b8:51:ef:f0:75:88:6a:76:36:e2:f3:c2:beSigner

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 548KB

UPX1 Size: 4.3MB - Virtual size: 4.3MB

.rsrc Size: 420KB - Virtual size: 424KB

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

55:66:68:31:1d:d3:a8:ed:5a:65:5a:95:0e:0f:76:cd:53:72:a9:b8:51:ef:f0:75:88:6a:76:36:e2:f3:c2:be
Signer

UPX0
Size: - Virtual size: 548KB

UPX1
Size: 4.3MB - Virtual size: 4.3MB

.rsrc
Size: 420KB - Virtual size: 424KB