30eee4e597d96267cea08df755aa7c7a[.]bin

Sharing

Copy URL

Twitter E-mail

General

Target

30eee4e597d96267cea08df755aa7c7a.bin
Size

141KB
MD5

ee7f572ddcf1558e2bf07343eafcceb7
SHA1

3f95d7239ec15fb8c65610f9be6b4a220b6cce84
SHA256

a0032ad7df9458b1f9d59c998e57fc9ce887966d9b58a2c3335cf25b6f7ab73d
SHA512

0ca2942a297b23b49241aadf949dfdffd70e06d8cbe0965586b2ccb6f65ab7342e54535351e142f061d01228c7b959885970f202ad1a8e030f3031eb60bbbb1a
SSDEEP

3072:8BmBRotHlHEXEKFvhnaGprJ0bHE3jTDsqvyzh1FOotQNUqC3wpDMuZ:oIR0FHEXEbtAbIh15tQtCuDMuZ

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/f57e5622f67cf9e999e09ace705a45a29ddac2859b4789c48f466201b61b887c.exe	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/f57e5622f67cf9e999e09ace705a45a29ddac2859b4789c48f466201b61b887c.exe
unpack002/out.upx

Files

30eee4e597d96267cea08df755aa7c7a.bin
.zip

Password: infected
f57e5622f67cf9e999e09ace705a45a29ddac2859b4789c48f466201b61b887c.exe
.exe windows:4 windows x64 arch:x64

Password: infected

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

UPX0
Size: - Virtual size: 464KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x64 arch:x64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 134KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 464KB

UPX1 Size: 132KB - Virtual size: 132KB

UPX2 Size: 512B - Virtual size: 4KB

Headers

File Characteristics

Sections

.text Size: 114KB - Virtual size: 113KB

.data Size: 512B - Virtual size: 288B

.rdata Size: 24KB - Virtual size: 23KB

.pdata Size: 3KB - Virtual size: 3KB

.xdata Size: 3KB - Virtual size: 3KB

.bss Size: - Virtual size: 134KB

.idata Size: 4KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 104B

.tls Size: 512B - Virtual size: 16B

/4 Size: 1KB - Virtual size: 1KB

/19 Size: 227KB - Virtual size: 226KB

/31 Size: 10KB - Virtual size: 9KB

/45 Size: 14KB - Virtual size: 13KB

/57 Size: 3KB - Virtual size: 2KB

/70 Size: 2KB - Virtual size: 1KB

/81 Size: 12KB - Virtual size: 12KB

/92 Size: 1KB - Virtual size: 1KB

UPX0
Size: - Virtual size: 464KB

UPX1
Size: 132KB - Virtual size: 132KB

UPX2
Size: 512B - Virtual size: 4KB

.text
Size: 114KB - Virtual size: 113KB

.data
Size: 512B - Virtual size: 288B

.rdata
Size: 24KB - Virtual size: 23KB

.pdata
Size: 3KB - Virtual size: 3KB

.xdata
Size: 3KB - Virtual size: 3KB

.bss
Size: - Virtual size: 134KB

.idata
Size: 4KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 104B

.tls
Size: 512B - Virtual size: 16B

/4
Size: 1KB - Virtual size: 1KB

/19
Size: 227KB - Virtual size: 226KB

/31
Size: 10KB - Virtual size: 9KB

/45
Size: 14KB - Virtual size: 13KB

/57
Size: 3KB - Virtual size: 2KB

/70
Size: 2KB - Virtual size: 1KB

/81
Size: 12KB - Virtual size: 12KB

/92
Size: 1KB - Virtual size: 1KB