76f31818827d7392bd4be35cea1d4a9cee2ef89ea8d5ad5b3290db8398bac9bcN

General

Target
76f31818827d7392bd4be35cea1d4a9cee2ef89ea8d5ad5b3290db8398bac9bcN
Size 83KB
Sample241110-jajndssdmk
SHA256 76f31818827d7392bd4be35cea1d4a9cee2ef89ea8d5ad5b3290db8398bac9bc
MD5 0a3a61abe6842247ee4efd6fd9e776e0
SHA1 85471e17539824ff02696f3333019315457f4330
SHA512 aab9d43c39525705a38f2388d8e2f5435f00f824023aea923f325efe32376521e35c24a21ecc9668f8433b7dce9d328d1fbb10489cc5aad6d05395bc0ba3e3a5
SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+/K:LJ0TAz6Mte4A+aaZx8EnCGVu/
MD5 SHA1 SHA512 SSDEEP

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
76f31818827d7392bd4be35cea1d4a9cee2ef89ea8d5ad5b3290db8398bac9bcN
unpack001/out.upx

File Explorer

76f31818827d7392bd4be35cea1d4a9cee2ef89ea8d5ad5b3290db8398bac9bcN

.exe 83KB
out.upx

.exe 135KB

76f31818827d7392bd4be35cea1d4a9cee2ef89ea8d5ad5b3290db8398bac9bcN

SHA256 76f31818827d7392bd4be35cea1d4a9cee2ef89ea8d5ad5b3290db8398bac9bc
MD5 0a3a61abe6842247ee4efd6fd9e776e0
SHA1 85471e17539824ff02696f3333019315457f4330
SHA512 aab9d43c39525705a38f2388d8e2f5435f00f824023aea923f325efe32376521e35c24a21ecc9668f8433b7dce9d328d1fbb10489cc5aad6d05395bc0ba3e3a5
SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+/K:LJ0TAz6Mte4A+aaZx8EnCGVu/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

165392

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

out.upx

SHA256 b6a33d824fee9b9963b2773c93a4218c37f5b2510c3680431e04fe9f3313ebc7
MD5 b554742c17724f5fdbf3d9c96e80166a
SHA1 166d087a90f7fe8da539f2e314c075551fa68a5a
SHA512 78bedd28ec842b21ff8e95a00d34312a784d3ca1b5c668b98cedb3014e5bf0e12c32c5ef4c755cbc936db453ed6a6ad42fe4ee8ac5a5ecec13ae2b921ef92c82
SSDEEP 3072:Xs3o8A4M3riN6MhGkgS3PL6pb9t16n5OkhBOPC/y/Fnncr:XDeM7iNEkgiOb31k1ECkJ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4400

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

116KB

Virtual Size

115KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

64B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

312B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

76f31818827d7392bd4be35cea1d4a9cee2ef89ea8d5ad5b3290db8398bac9bcN

generic

out.upx

generic

Sharing

General

Malware Config

Signatures

File Explorer

76f31818827d7392bd4be35cea1d4a9cee2ef89ea8d5ad5b3290db8398bac9bcN

generic

out.upx

generic