67653f6dd69d45434806a57c964ecaccdf5963ae7782c57cdc2bdaa7d6f1a437

General

Target

67653f6dd69d45434806a57c964ecaccdf5963ae7782c57cdc2bdaa7d6f1a437
Size

8.5MB
MD5

d7ee30ae66f559ee3a6a1451ae8c18f8
SHA1

1e235d9bcfac98e3cf12abec1ac3c2708da110eb
SHA256

67653f6dd69d45434806a57c964ecaccdf5963ae7782c57cdc2bdaa7d6f1a437
SHA512

ffdc35d1e16cd44a7694b5b0fd743a78493dfd82a72a9a2c3998e17482ce3dee0ed856236066c8ca11fb43fb4543634a02a92f4bf687bd7f6dbbf2b357be8fb5
SSDEEP

196608:rnrb647wOTETbvKgzckPKRyZSl3AdBYObPHy4n3xE6qp4F:rrb6GhTE3DPKwTdbPHy43xEj4F

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
67653f6dd69d45434806a57c964ecaccdf5963ae7782c57cdc2bdaa7d6f1a437
unpack001/out.upx

Files

67653f6dd69d45434806a57c964ecaccdf5963ae7782c57cdc2bdaa7d6f1a437
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 48.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 8.3MB - Virtual size: 8.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 114KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 13.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 26.7MB - Virtual size: 26.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 777B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 265B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13.2MB - Virtual size: 13.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 48.6MB

UPX1 Size: 8.3MB - Virtual size: 8.3MB

.rsrc Size: 114KB - Virtual size: 116KB

Headers

DLL Characteristics

File Characteristics

Sections

.textbss Size: - Virtual size: 13.1MB

.text Size: 26.7MB - Virtual size: 26.7MB

.rdata Size: 3.7MB - Virtual size: 3.7MB

.data Size: 56KB - Virtual size: 149KB

.idata Size: 46KB - Virtual size: 46KB

.tls Size: 1024B - Virtual size: 777B

.00cfg Size: 512B - Virtual size: 265B

.rsrc Size: 13.2MB - Virtual size: 13.2MB

UPX0
Size: - Virtual size: 48.6MB

UPX1
Size: 8.3MB - Virtual size: 8.3MB

.rsrc
Size: 114KB - Virtual size: 116KB

.textbss
Size: - Virtual size: 13.1MB

.text
Size: 26.7MB - Virtual size: 26.7MB

.rdata
Size: 3.7MB - Virtual size: 3.7MB

.data
Size: 56KB - Virtual size: 149KB

.idata
Size: 46KB - Virtual size: 46KB

.tls
Size: 1024B - Virtual size: 777B

.00cfg
Size: 512B - Virtual size: 265B

.rsrc
Size: 13.2MB - Virtual size: 13.2MB