322b4f3296484dc4bac7b744af18d0ff32a1141d04641ad9f8a1ce0ce34b27ffN

General

Target
322b4f3296484dc4bac7b744af18d0ff32a1141d04641ad9f8a1ce0ce34b27ffN
Size 83KB
Sample241108-asm9vs1enh
SHA256 322b4f3296484dc4bac7b744af18d0ff32a1141d04641ad9f8a1ce0ce34b27ff
MD5 9c0f012c66afee1cd6bb4fa1b420ccb0
SHA1 707919fc25bfd06639ae986a18e2f878a19caa6d
SHA512 24af4ce18584fca7198b8dfd863429bff5e2626bb0d3558916ee51a94544fa68cd3fcd72d28d27d190856c84b5113933a108fb84df6a0f13161a5f6fe2d36917
SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+qK:LJ0TAz6Mte4A+aaZx8EnCGVuq
MD5 SHA1 SHA512 SSDEEP

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
322b4f3296484dc4bac7b744af18d0ff32a1141d04641ad9f8a1ce0ce34b27ffN
unpack001/out.upx

File Explorer

322b4f3296484dc4bac7b744af18d0ff32a1141d04641ad9f8a1ce0ce34b27ffN

.exe 83KB
out.upx

.exe 135KB

322b4f3296484dc4bac7b744af18d0ff32a1141d04641ad9f8a1ce0ce34b27ffN

SHA256 322b4f3296484dc4bac7b744af18d0ff32a1141d04641ad9f8a1ce0ce34b27ff
MD5 9c0f012c66afee1cd6bb4fa1b420ccb0
SHA1 707919fc25bfd06639ae986a18e2f878a19caa6d
SHA512 24af4ce18584fca7198b8dfd863429bff5e2626bb0d3558916ee51a94544fa68cd3fcd72d28d27d190856c84b5113933a108fb84df6a0f13161a5f6fe2d36917
SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+qK:LJ0TAz6Mte4A+aaZx8EnCGVuq
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

165392

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

out.upx

SHA256 71103cad45a40999455eb32681e902f4e24e9caf75a671db83417772e88430b6
MD5 0933f2e7de1c8bb41f077b554b5c4c2f
SHA1 6fa006d2686718c79be2a7870c87848243db42ec
SHA512 594c3a3f4aa405532cc117c54cf2e627149e23bd2121bcd3a7fb23953f88b672ddc2436ed75646a1a95423f65095d3ea434130d38615b47db45773ff3d694a14
SSDEEP 3072:Xs3o8A4M3riN6MhGkgS3PL6pb9t16n5OkhBOPC/3/Fnncr:XDeM7iNEkgiOb31k1ECHJ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4400

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

116KB

Virtual Size

115KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

64B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

312B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

322b4f3296484dc4bac7b744af18d0ff32a1141d04641ad9f8a1ce0ce34b27ffN

generic

out.upx

generic

Sharing

General

Malware Config

Signatures

File Explorer

322b4f3296484dc4bac7b744af18d0ff32a1141d04641ad9f8a1ce0ce34b27ffN

generic

out.upx

generic