afabf947a6ace9b3c9ff4f5bb3688beb[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

afabf947a6ace9b3c9ff4f5bb3688beb.bin
Size

128KB
MD5

afabf947a6ace9b3c9ff4f5bb3688beb
SHA1

9da33b390a071fc7eb335d5f757aa12ee492a9c2
SHA256

a03ae86ed3c2a8fe4dcd1485a4fc1d1e5068314c9131ada29ae88dc2832862bb
SHA512

d84d14165e7fd75e6fe476352a55ceea218c80fbde9e9159c8dbe61dd744b8ea3a4addddba760c81db0490493a91d1a92251919b9bfd39cd7a4811e8f226d4e5
SSDEEP

768:qgVbxX6LsoEEeegiZPvEhHSG+gBI5NQXtckstOOtEvwDpjXW:qgn6QFElP6n+gBEu9cvMOtEvwDpjX

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
afabf947a6ace9b3c9ff4f5bb3688beb.bin

Files

afabf947a6ace9b3c9ff4f5bb3688beb.bin
.exe windows:5 windows x86 arch:x86

a0c275da44db88d1f2fc3943daf6948b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
FormatMessageA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
GetACP
CreateFileA

gdi32

CreateFontIndirectA

user32

PostQuitMessage
GetMessageA
UpdateWindow
EndPaint
DispatchMessageA
BeginPaint
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadCursorA
LoadIconA
ShowWindow
GetWindowRect

Sections

UPX0
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE