60af6b840e04b2d9260a9e747e71f9bb8971a1b0b58606ea9a114fcdb00daf41N

General

Target
60af6b840e04b2d9260a9e747e71f9bb8971a1b0b58606ea9a114fcdb00daf41N
Size 83KB
Sample241108-cc4b9asfnl
SHA256 60af6b840e04b2d9260a9e747e71f9bb8971a1b0b58606ea9a114fcdb00daf41
MD5 a6143c40c4d6bf49e8c55c3bd5ba57c0
SHA1 ceb312b8d77d028a17b8b25255829c7d1f7b00f6
SHA512 f2563904589ff631355eaa6a33d721ed640cdb1d0eb095d24375dfd70383d46d7554988b5b9b29027a33360564ba4da4615e90374e571add79b618478904d982
SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+5K:LJ0TAz6Mte4A+aaZx8EnCGVu5
MD5 SHA1 SHA512 SSDEEP

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
60af6b840e04b2d9260a9e747e71f9bb8971a1b0b58606ea9a114fcdb00daf41N
unpack001/out.upx

File Explorer

60af6b840e04b2d9260a9e747e71f9bb8971a1b0b58606ea9a114fcdb00daf41N

.exe 83KB
out.upx

.exe 135KB

60af6b840e04b2d9260a9e747e71f9bb8971a1b0b58606ea9a114fcdb00daf41N

SHA256 60af6b840e04b2d9260a9e747e71f9bb8971a1b0b58606ea9a114fcdb00daf41
MD5 a6143c40c4d6bf49e8c55c3bd5ba57c0
SHA1 ceb312b8d77d028a17b8b25255829c7d1f7b00f6
SHA512 f2563904589ff631355eaa6a33d721ed640cdb1d0eb095d24375dfd70383d46d7554988b5b9b29027a33360564ba4da4615e90374e571add79b618478904d982
SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+5K:LJ0TAz6Mte4A+aaZx8EnCGVu5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

165392

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

out.upx

SHA256 d43a5f863447863d1870b7fc5e8cb117a31420088b7484c402340b058baab295
MD5 84475c3e7f48b3f2e4fc1f3ac0f093c1
SHA1 d526a28c1a2037f9ebfaeb51c08ca4e06a68e49e
SHA512 0a1733f711f3a39a037d7f4e7f3ee498dc81e125f68b4028c767da5e0a3e822df4cbd71bf9d48cefcad8f7df492ff105427eb5e0fd0c4e6b49f81eceb15a0a43
SSDEEP 3072:Xs3o8A4M3riN6MhGkgS3PL6pb9t16n5OkhBOPC/A/Fnncr:XDeM7iNEkgiOb31k1ECeJ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4400

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

116KB

Virtual Size

115KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

64B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

312B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

60af6b840e04b2d9260a9e747e71f9bb8971a1b0b58606ea9a114fcdb00daf41N

generic

out.upx

generic

Sharing

General

Malware Config

Signatures

File Explorer

60af6b840e04b2d9260a9e747e71f9bb8971a1b0b58606ea9a114fcdb00daf41N

generic

out.upx

generic