d775e4e67b74d9c0148288db72f352e6b1c5a99c40550e7b22f2d01157f416f2

General

Target

d775e4e67b74d9c0148288db72f352e6b1c5a99c40550e7b22f2d01157f416f2
Size

13KB
MD5

f91f5f2845a223948c978b3c9e70f441
SHA1

c04e106bf1acac6a6a170cd09686cc5691d213c1
SHA256

d775e4e67b74d9c0148288db72f352e6b1c5a99c40550e7b22f2d01157f416f2
SHA512

d928f6f98ef78a65541b390b6234c23da142ae1986bc164a562ca31da0e6935dba0fcd6bbaf653567aba6d57fc56da9eb1e003bf031ebeda0238796d5853697f
SSDEEP

384:rsM6h3sBqz6iX4S1tWsG4mP2GIIxKneRRWe:gMLBqz6iXDWBP2G6eR0e

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
d775e4e67b74d9c0148288db72f352e6b1c5a99c40550e7b22f2d01157f416f2
unpack001/out.upx

Files

d775e4e67b74d9c0148288db72f352e6b1c5a99c40550e7b22f2d01157f416f2
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

g_module_build_path
g_module_close
g_module_error
g_module_error_quark
g_module_make_resident
g_module_name
g_module_name_utf8
g_module_open
g_module_open_full
g_module_open_utf8
g_module_supported
g_module_symbol

Sections

UPX0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 32KB

UPX1 Size: 11KB - Virtual size: 12KB

UPX2 Size: 1KB - Virtual size: 4KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 648B

.pdata Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 80B

UPX0
Size: - Virtual size: 32KB

UPX1
Size: 11KB - Virtual size: 12KB

UPX2
Size: 1KB - Virtual size: 4KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 648B

.pdata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 80B