778fb93f9d0f33e4ad58e4f8f04829037ca01dd2854f2926b5c49cb0817aa89aN

General

Target
778fb93f9d0f33e4ad58e4f8f04829037ca01dd2854f2926b5c49cb0817aa89aN
Size 83KB
Sample241108-a8chastqck
SHA256 778fb93f9d0f33e4ad58e4f8f04829037ca01dd2854f2926b5c49cb0817aa89a
MD5 759864f0e1a6851c9bc24cc7730bd200
SHA1 6690a1e05bd4d63809ee838856acd161d2f9ecf2
SHA512 9e258141cd7525a6aaf9305fff4e4322081f5bcc852d124f57abfaed00dca4d572cbc950a6c9831330ea28c07d2d8fd7ac49de14e961513bf0b925a6f4f67b96
SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+dK:LJ0TAz6Mte4A+aaZx8EnCGVud
MD5 SHA1 SHA512 SSDEEP

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
778fb93f9d0f33e4ad58e4f8f04829037ca01dd2854f2926b5c49cb0817aa89aN
unpack001/out.upx

File Explorer

778fb93f9d0f33e4ad58e4f8f04829037ca01dd2854f2926b5c49cb0817aa89aN

.exe 83KB
out.upx

.exe 135KB

778fb93f9d0f33e4ad58e4f8f04829037ca01dd2854f2926b5c49cb0817aa89aN

SHA256 778fb93f9d0f33e4ad58e4f8f04829037ca01dd2854f2926b5c49cb0817aa89a
MD5 759864f0e1a6851c9bc24cc7730bd200
SHA1 6690a1e05bd4d63809ee838856acd161d2f9ecf2
SHA512 9e258141cd7525a6aaf9305fff4e4322081f5bcc852d124f57abfaed00dca4d572cbc950a6c9831330ea28c07d2d8fd7ac49de14e961513bf0b925a6f4f67b96
SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+dK:LJ0TAz6Mte4A+aaZx8EnCGVud
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

165392

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

out.upx

SHA256 b52f0765ba3bb4b1c7100269485b322c295ccb3f6bf1eee4e976dae71309f476
MD5 5ad664f7b08686876ee33d8dc0263df4
SHA1 dc81ff43e687a3cd6b08c4bf296ed6f6bdb56b37
SHA512 fb171850b3d8b406d880a2ffaf69cb4aa46b909cb153f907909d1deb187d16dc38b470750c337f6ee0cb5d372fd4cbbe048e6e909fee1d078c442e40615f38e0
SSDEEP 3072:Xs3o8A4M3riN6MhGkgS3PL6pb9t16n5OkhBOPC/U/Fnncr:XDeM7iNEkgiOb31k1ECiJ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4400

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

116KB

Virtual Size

115KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

64B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

312B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

778fb93f9d0f33e4ad58e4f8f04829037ca01dd2854f2926b5c49cb0817aa89aN

generic

out.upx

generic

Sharing

General

Malware Config

Signatures

File Explorer

778fb93f9d0f33e4ad58e4f8f04829037ca01dd2854f2926b5c49cb0817aa89aN

generic

out.upx

generic