744ae49a95157d51913d5f6de448f9d07ef3d3154866f911ca4f96a27322a65a

General

Target
744ae49a95157d51913d5f6de448f9d07ef3d3154866f911ca4f96a27322a65a
Size 83KB
Sample241109-3f196stmbx
SHA256 744ae49a95157d51913d5f6de448f9d07ef3d3154866f911ca4f96a27322a65a
MD5 ccd969e2f30b7a8b47ab974fcdd316d1
SHA1 5985e4fbdab5a46172dceab1667b3d50a3e07a5f
SHA512 ec61b72164df9e46b100b9783ee28a729920994e70cfa9ba1a3a5e53c219336496f999a1f2bf3aec52178df34f4815e9832287c1570b32b4a8c57c6a74f2eacd
SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+WK:LJ0TAz6Mte4A+aaZx8EnCGVuW
MD5 SHA1 SHA512 SSDEEP

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
744ae49a95157d51913d5f6de448f9d07ef3d3154866f911ca4f96a27322a65a
unpack001/out.upx

File Explorer

744ae49a95157d51913d5f6de448f9d07ef3d3154866f911ca4f96a27322a65a

.exe 83KB
out.upx

.exe 135KB

744ae49a95157d51913d5f6de448f9d07ef3d3154866f911ca4f96a27322a65a

SHA256 744ae49a95157d51913d5f6de448f9d07ef3d3154866f911ca4f96a27322a65a
MD5 ccd969e2f30b7a8b47ab974fcdd316d1
SHA1 5985e4fbdab5a46172dceab1667b3d50a3e07a5f
SHA512 ec61b72164df9e46b100b9783ee28a729920994e70cfa9ba1a3a5e53c219336496f999a1f2bf3aec52178df34f4815e9832287c1570b32b4a8c57c6a74f2eacd
SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+WK:LJ0TAz6Mte4A+aaZx8EnCGVuW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

165392

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

out.upx

SHA256 6ccfd4ff22edee48d086317fd22f365bcea48c86a3c9716f8040cf6b522cc9e2
MD5 c1effe59ea5c5bce372293d733757319
SHA1 45c87f1d2d379d213c71db5ad11e60549d869702
SHA512 d5ad887adeb1955169e4015419708416a6ad46ee2f56ea3b0e82136e7b1d44a05ab12307ec6749183abb6c9c8c61b7190fb06af6b116e01c1969e1c5bd667722
SSDEEP 3072:Xs3o8A4M3riN6MhGkgS3PL6pb9t16n5OkhBOPC/r/Fnncr:XDeM7iNEkgiOb31k1EC7J
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4400

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

116KB

Virtual Size

115KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

64B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

312B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

744ae49a95157d51913d5f6de448f9d07ef3d3154866f911ca4f96a27322a65a

generic

out.upx

generic

Sharing

General

Malware Config

Signatures

File Explorer

744ae49a95157d51913d5f6de448f9d07ef3d3154866f911ca4f96a27322a65a

generic

out.upx

generic