14b994c328f83c8b7bb71838707e91d4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14b994c328f83c8b7bb71838707e91d4
Size

77KB
MD5

14b994c328f83c8b7bb71838707e91d4
SHA1

44d808bc0d9510cfa02aec8ac381c3b32189d7d9
SHA256

8178270c039e6fb8b98e4ab96a6df9e275a073592ded98dfe7ccfd4140ca3beb
SHA512

6e501cf3a3ba1c422304c7b5caf3b1facf5387d0714ebcaf9c8db36f6df78b5235fffe9518a113ad423621181a925729c8d2a536cc013752665396d83c541bb6
SSDEEP

1536:zgP28g0A6M26fqf5NAlKsTPcZBbnz7d8CtfoQNUDh0pz0H7WY:zgPS0bH/h8KsEB7z7d8CFL+hik7WY

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
14b994c328f83c8b7bb71838707e91d4
unpack001/out.upx

Files

14b994c328f83c8b7bb71838707e91d4
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 476KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 74KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 520KB - Virtual size: 517KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ