4a187aed5e82fec993ed93283af093a2877ce3cb57acdce9164c411165b6cc93

General

Target

4a187aed5e82fec993ed93283af093a2877ce3cb57acdce9164c411165b6cc93
Size

1.4MB
MD5

18b8c6d68ed19960cd7c39fcf1240f7f
SHA1

51ff2efb7522fe2529dbf6667ddadc471f0135a2
SHA256

4a187aed5e82fec993ed93283af093a2877ce3cb57acdce9164c411165b6cc93
SHA512

a3a070ea6c2a2342b2094a7e23b27f76ff2a21dde720b2415afd71a174233c816a9d6f79215a727aa203f59922798b42d7ff9d366571ea45076c9b969316be9f
SSDEEP

24576:xxfv6MWkf8bbaIXVeAiguPxl/229LU3lTfXFBaqlpIklXohG5pM0RD/fxJ+feRN:XzWkqbJXFaPv/229ETvFBfnIklnRD/fh

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/out.upx

Files

4a187aed5e82fec993ed93283af093a2877ce3cb57acdce9164c411165b6cc93
.exe windows:4 windows x86 arch:x86

Code Sign

01:99:ee:b2:b7:31:24:6e:ba:74:0d:96:5f:5c:27:61
Certificate

Issuer

CN=Root Agency

Not Before

26/09/2024, 04:00

Not After

31/12/2039, 23:59

Subject

CN=俊俊,O=制作BY俊俊,1.2.840.113549.1.9.1=#0c103635313436343837364071712e636f6d

36:f7:1c:66:16:ef:14:d7:27:a8:43:dd:71:13:98:24:a7:8c:bf:c4
Signer

Actual PE Digest

36:f7:1c:66:16:ef:14:d7:27:a8:43:dd:71:13:98:24:a7:8c:bf:c4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 2.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 272KB - Virtual size: 643KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

01:99:ee:b2:b7:31:24:6e:ba:74:0d:96:5f:5c:27:61Certificate

36:f7:1c:66:16:ef:14:d7:27:a8:43:dd:71:13:98:24:a7:8c:bf:c4Signer

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 2.0MB

UPX1 Size: 1.3MB - Virtual size: 1.3MB

.rsrc Size: 21KB - Virtual size: 24KB

Headers

File Characteristics

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 1.1MB - Virtual size: 1.1MB

.data Size: 272KB - Virtual size: 643KB

.rsrc Size: 44KB - Virtual size: 41KB

01:99:ee:b2:b7:31:24:6e:ba:74:0d:96:5f:5c:27:61
Certificate

36:f7:1c:66:16:ef:14:d7:27:a8:43:dd:71:13:98:24:a7:8c:bf:c4
Signer

UPX0
Size: - Virtual size: 2.0MB

UPX1
Size: 1.3MB - Virtual size: 1.3MB

.rsrc
Size: 21KB - Virtual size: 24KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 1.1MB - Virtual size: 1.1MB

.data
Size: 272KB - Virtual size: 643KB

.rsrc
Size: 44KB - Virtual size: 41KB