1ad0c12ddecc4ff2aaf79d8432cf5a26 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ad0c12ddecc4ff2aaf79d8432cf5a26
Size

23KB
MD5

1ad0c12ddecc4ff2aaf79d8432cf5a26
SHA1

3d2317e5ac85db8dc20c333df5c2eeca130c8301
SHA256

79fbb8efa792a116e75a2f3fcf7e85d73a20b4b828e6233023331b6dc2f57cd7
SHA512

e02eabaeec732ce241ec3de13d21f6d6b9736fffe0267480929c483836b1cf0297a25798d839a0b4f0c02f61225052a08282bf6dfe2373f95782f9362a666296
SSDEEP

384:WSuA5yE4zaESciRSsxrVNdTxjxeEf1NN8Oia2JJnhbLGx2qgnnzj044U9t:UA5Z4zFicsxRHVxRt2JvGx2PkWn

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
1ad0c12ddecc4ff2aaf79d8432cf5a26
unpack001/out.upx

Files

1ad0c12ddecc4ff2aaf79d8432cf5a26
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE