1f12a6ccf8c68303cc38bc8ecc24045df2847d333d9e78c368c21100be9f27e6

Sharing

Copy URL Twitter E-mail

General

Target
1f12a6ccf8c68303cc38bc8ecc24045df2847d333d9e78c368c21100be9f27e6
Size 58KB
Sample261102-e5k3gsey7x
SHA256 1f12a6ccf8c68303cc38bc8ecc24045df2847d333d9e78c368c21100be9f27e6
MD5 474887e4b015ab22ce2eb7772b9a626e
SHA1 3ef74179e364df8d871e578470bbf23b0a4f0955
SHA512 df47e869d4e5b2b5a08778adb9623ee8928fcd47a7ab55bf556537e23e2bfd5dc224f3ed40d2446f40b22f9faf17b2a6becb2487d8f0218eea614fc69d076dcb
SSDEEP 768:XXWoqEMkaw6sUji6OTHbfKlSGCp9IY0JmKOp+G2GjhR8yk9ce38uT:WdBpRjT07fKKWg+G2GjhR0
TLSH
T1DE4309E1BAE85D86E654533E96DBD22A373CFBE44A439B474634B4761B03EC17EC0206
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
1f12a6ccf8c68303cc38bc8ecc24045df2847d333d9e78c368c21100be9f27e6
unpack001/out.upx

File Explorer

1f12a6ccf8c68303cc38bc8ecc24045df2847d333d9e78c368c21100be9f27e6

.exe 58KB
out.upx

.exe 79KB

1f12a6ccf8c68303cc38bc8ecc24045df2847d333d9e78c368c21100be9f27e6

SHA256 1f12a6ccf8c68303cc38bc8ecc24045df2847d333d9e78c368c21100be9f27e6
MD5 474887e4b015ab22ce2eb7772b9a626e
SHA1 3ef74179e364df8d871e578470bbf23b0a4f0955
SHA512 df47e869d4e5b2b5a08778adb9623ee8928fcd47a7ab55bf556537e23e2bfd5dc224f3ed40d2446f40b22f9faf17b2a6becb2487d8f0218eea614fc69d076dcb
SSDEEP 768:XXWoqEMkaw6sUji6OTHbfKlSGCp9IY0JmKOp+G2GjhR8yk9ce38uT:WdBpRjT07fKKWg+G2GjhR0
TLSH
T1DE4309E1BAE85D86E654533E96DBD22A373CFBE44A439B474634B4761B03EC17EC0206
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

124768

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

out.upx

SHA256 b8ebfc3a30a0387ad203c15647869c7520f09417c80c430889f010d2cc19b194
MD5 2cca67a72e7fde384a817284d74de2d8
SHA1 76e8bce897268390a473432ab2de925448a2a20b
SHA512 d2fbd40b73718e03c59b1e3b7b67104097622d8d13aa93be8f1d950a549e3c48e7cbd09f0f97382252108e2990dc597f7062889716b5fa903adadb135cc6e41b
SSDEEP 1536:HFFECcQPl6DwlwIVozIDKSBp5LVklDbbsG3vuNm:kClJR
TLSH
T1D6834B83EF46FAA3C90D0A32CDBE475C612696CD1BC96C039DB97638165B0D0DF5B642
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5216

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

464B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

176B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1024B

Virtual Size

580B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/14

Size

1024B

Virtual Size

776B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/29

Size

39KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/41

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/55

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/67

Size

1024B

Virtual Size

743B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/78

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/94

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/110

Size

512B

Virtual Size

418B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

1f12a6ccf8c68303cc38bc8ecc24045df2847d333d9e78c368c21100be9f27e6

generic

out.upx

generic