8350c0ad7bb2e3d9686ee9572e83e71291c4fec35d8d1083e80f0f868fd9333b | Triage

Sharing

General

Target

8350c0ad7bb2e3d9686ee9572e83e71291c4fec35d8d1083e80f0f868fd9333b
Size

54KB
MD5

add0a7106589c6a8cb2228d522950c11
SHA1

0ace2555d718b3c8b8153cd41662d06e7f2fb101
SHA256

8350c0ad7bb2e3d9686ee9572e83e71291c4fec35d8d1083e80f0f868fd9333b
SHA512

e42cb0e92e05aac5583b6a664289a58db0bb926e7ea5b4aa64c041f697fb64604aeb5bea35c3e9fd75b152a659d9748a448a9d327fa134e3345c192d480cd7d8
SSDEEP

768:1dQQ9O7HcRZSYWMR8ESFFW8XBSziCTMnU5NNx6sfEDLBng3HzQLpouQdxK:1dQZYhWMRZOjR0VTR5NNEsfOBgXJ

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
8350c0ad7bb2e3d9686ee9572e83e71291c4fec35d8d1083e80f0f868fd9333b
unpack001/out.upx

Files

8350c0ad7bb2e3d9686ee9572e83e71291c4fec35d8d1083e80f0f868fd9333b
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ