6d6bbe6c254162dd051c1586c735fd7a4099574d5f8ac893952924d377e668c3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d6bbe6c254162dd051c1586c735fd7a4099574d5f8ac893952924d377e668c3
Size

723KB
MD5

a388456f4b737cac7659be3e6fbce404
SHA1

7a3ee2a5847d917c0469472ae3fc3a7455b9a959
SHA256

6d6bbe6c254162dd051c1586c735fd7a4099574d5f8ac893952924d377e668c3
SHA512

92b7864b7e5d6adeaa7a23bedd46c71647f396608983836454fb3d3656ca1051258041af49a67b571d62c451d75d0d439c3e6f9fba9717cd29e96f0331ec4394
SSDEEP

12288:RrYyRRNQ6RQDwK3Ecp1G9QjW8HzKqF4EZNtuCNL/0bfucAtgsLaEwB:RrYyR7Q6QMK3EqUqjzz/jSicAzLy

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
6d6bbe6c254162dd051c1586c735fd7a4099574d5f8ac893952924d377e668c3
unpack001/out.upx

Files

6d6bbe6c254162dd051c1586c735fd7a4099574d5f8ac893952924d377e668c3
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ