12e096515fdd7d46f89dc9c304c6a1c6 | Triage

Sharing

General

Target

12e096515fdd7d46f89dc9c304c6a1c6
Size

46KB
MD5

12e096515fdd7d46f89dc9c304c6a1c6
SHA1

53ca6b6d8942267b258a853b7acac75e21dd8fa1
SHA256

797c9d542f9745fd757a8033d1f0da9b8f4db2a1986cb47622e82d89959726d7
SHA512

79249fb8a36a294fdd29136506c67e72b85a69141f33a0e584020a7e2fc6c84a3a309ebfb61cd76abe898dea05d28976c8cf3506e8f004f53c101d5a0a93ba12
SSDEEP

768:SCIqdH/k1ZVcT194jp4Yzx82qxvsz33XlYuj+mrk1H3tI9MJ0VDXYy4NyOhH:SNqaLV8a6YzxcxkrHllj+PH35Jwp4Nyc

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
12e096515fdd7d46f89dc9c304c6a1c6
unpack001/out.upx

Files

12e096515fdd7d46f89dc9c304c6a1c6
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ