morkopeli2344[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

morkopeli2344.zip
Size

90.2MB
MD5

2c24b21b9e7c5bcba8b68f0de74b5625
SHA1

2c884d3ee3b9df10644c11bf371d014117b94b99
SHA256

61870b530420b0bc6a1cf76fad061776190083909a63fd84c65fb23b24c3659c
SHA512

9fd3fbed21e13f53d4ad000ca37b5fc97ceabd971177153eac62345e4306e807f5e5b8296c573d5936c8ecb26013b1cf03ef0bf3b0873dee305fd70164ba974a
SSDEEP

1572864:Y1AwgtcyUUasjBmLiQJgKfS6nsW2GOWnp5wV8lWudnN6/TVWehO5LlJ1Vr0nWK7:YaJ+Uai+iVYS612GONVKdNe85LlJoh

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/Mörköpeli/Mörköpeli23.exe	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Mörköpeli/Mörköpeli23.exe
unpack002/out.upx

Files

morkopeli2344.zip
.zip

Password: 123
Mörköpeli/Mörköpeli23.exe
.exe windows:5 windows x86 arch:x86

Password: 123

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 3.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1.5MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 861B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 19B - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 549KB - Virtual size: 549KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Mörköpeli/music/m_hallow1.mp3
Mörköpeli/music/m_hallow2.mp3
Mörköpeli/music/m_hallow3.mp3
Mörköpeli/music/m_hallow4.mp3
Mörköpeli/music/m_jolly.mp3
Mörköpeli/music/m_lets_do_this.mp3
Mörköpeli/music/m_lets_do_this2.mp3
Mörköpeli/music/m_menu.mp3
Mörköpeli/music/m_morko.mp3
Mörköpeli/music/m_morko2.mp3
Mörköpeli/music/m_music1.mp3
Mörköpeli/music/m_music2.mp3
Mörköpeli/music/m_music3.mp3
Mörköpeli/music/m_music4.mp3
Mörköpeli/music/m_music5.mp3
Mörköpeli/music/m_tracker.mp3
Mörköpeli/music/m_tracker2.mp3
Mörköpeli/music/m_victory.mp3
Mörköpeli/music/m_victory2.mp3
Mörköpeli/music/m_vulnerable.mp3

Sharing

General

Malware Config

Signatures

Files

Password: 123

Password: 123

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 3.5MB

UPX1 Size: 1.0MB - Virtual size: 1.0MB

.rsrc Size: 19KB - Virtual size: 20KB

Headers

File Characteristics

Sections

.text Size: 2.2MB - Virtual size: 2.2MB

.itext Size: 26KB - Virtual size: 28KB

.data Size: 45KB - Virtual size: 48KB

.bss Size: - Virtual size: 1.5MB

.idata Size: 16KB - Virtual size: 20KB

.didata Size: 861B - Virtual size: 4KB

.tls Size: - Virtual size: 4KB

.rdata Size: 19B - Virtual size: 172KB

.rsrc Size: 549KB - Virtual size: 549KB

UPX0
Size: - Virtual size: 3.5MB

UPX1
Size: 1.0MB - Virtual size: 1.0MB

.rsrc
Size: 19KB - Virtual size: 20KB

.text
Size: 2.2MB - Virtual size: 2.2MB

.itext
Size: 26KB - Virtual size: 28KB

.data
Size: 45KB - Virtual size: 48KB

.bss
Size: - Virtual size: 1.5MB

.idata
Size: 16KB - Virtual size: 20KB

.didata
Size: 861B - Virtual size: 4KB

.tls
Size: - Virtual size: 4KB

.rdata
Size: 19B - Virtual size: 172KB

.rsrc
Size: 549KB - Virtual size: 549KB