85b091c6ad93cedb0e65901ce40bfba7a51173905d6a406799068763c0c607a8

General

Target

85b091c6ad93cedb0e65901ce40bfba7a51173905d6a406799068763c0c607a8
Size

148KB
MD5

3a311e0975efec048502697241b1e9ad
SHA1

e62f541f78815969dffb6bbf44af94ce9caef0d0
SHA256

85b091c6ad93cedb0e65901ce40bfba7a51173905d6a406799068763c0c607a8
SHA512

ec7255f99673ac3c470f4a2ec271b28295d4ef61e6cf2c3697420bf9a7646693e80a9f356ad4879e338c5c406371aebec5d56395d73357204edddf013697226d
SSDEEP

3072:JR9t9M8nUzzYfIYW2J7/4Q7w2rkil7vWezqKZPiPUfrfCSERNuE5kmXX1x3E:JRHVnwHRU7QQ7wgkid1MPA65RH531JE

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
85b091c6ad93cedb0e65901ce40bfba7a51173905d6a406799068763c0c607a8
unpack001/out.upx

Files

85b091c6ad93cedb0e65901ce40bfba7a51173905d6a406799068763c0c607a8
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

UPX0
Size: - Virtual size: 532KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 146KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 505KB - Virtual size: 504KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 532KB

UPX1 Size: 146KB - Virtual size: 148KB

.rsrc Size: 1024B - Virtual size: 4KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 505KB - Virtual size: 504KB

.rdata Size: 110KB - Virtual size: 110KB

.data Size: 8KB - Virtual size: 18KB

.pdata Size: 15KB - Virtual size: 15KB

.idata Size: 5KB - Virtual size: 4KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

UPX0
Size: - Virtual size: 532KB

UPX1
Size: 146KB - Virtual size: 148KB

.rsrc
Size: 1024B - Virtual size: 4KB

.text
Size: 505KB - Virtual size: 504KB

.rdata
Size: 110KB - Virtual size: 110KB

.data
Size: 8KB - Virtual size: 18KB

.pdata
Size: 15KB - Virtual size: 15KB

.idata
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB