1aac81943b03eb9ce7a0ac747fd6425c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1aac81943b03eb9ce7a0ac747fd6425c
Size

361KB
MD5

1aac81943b03eb9ce7a0ac747fd6425c
SHA1

c4dae98853a2f22be3ef44ab582a8c90abb72e66
SHA256

3bf4a9e766a52a23728420ae93c3c56382726b172ea1bd0a95fec8f5dc52c4a9
SHA512

ccfd659c30bf9031255d4ebe0a5329a6a587eb0dd072066d8228210c760daec00080e92ad9f0ea7b14dc0116d7d53039e53202baad3c3350b604e5ee9e247979
SSDEEP

6144:tCQFrf+mOQNlElQFt+myDqefD63RT0VuFjrJjsqm9y1yCYypcafVYbtzOPYzevMO:tTFrf+mOQNlWWpyDqef+3Z0sgqfyccaR

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
1aac81943b03eb9ce7a0ac747fd6425c
unpack001/out.upx

Files

1aac81943b03eb9ce7a0ac747fd6425c
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 204KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 334KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 220KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 296KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ