0b28a6463448049a89712354cf312044

General

Target

0b28a6463448049a89712354cf312044
Size

106KB
MD5

0b28a6463448049a89712354cf312044
SHA1

d8896ea07c7bc6c49331fbe14d8532d9819d179e
SHA256

54d949d7b5f61214e5d0feb4724056e563806d2501a0f0a738ddc005d84e82a9
SHA512

c026c4a572df2ced26bef36766b7887dc5a039b5fe6eedbad39d0445ba03799fc8a02070f68ab589c0e88ca417444c06be77bb8b582db8264751a41cb40b3f1f
SSDEEP

384:1FLkcnRD9zBllgSSzq0lHmDpv/XLf3gmfXJtQzx7Ab9oYvQNLVluvgYDA:3hDvF4QDpv/rgiZtQzx7U9Y

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
0b28a6463448049a89712354cf312044
unpack001/out.upx

Files

0b28a6463448049a89712354cf312044
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 528B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 44KB

UPX1 Size: 6KB - Virtual size: 8KB

.rsrc Size: 79KB - Virtual size: 80KB

Headers

File Characteristics

Sections

.text Size: 10KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 80B

.rdata Size: 3KB - Virtual size: 2KB

.bss Size: - Virtual size: 528B

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 15KB - Virtual size: 14KB

UPX0
Size: - Virtual size: 44KB

UPX1
Size: 6KB - Virtual size: 8KB

.rsrc
Size: 79KB - Virtual size: 80KB

.text
Size: 10KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 80B

.rdata
Size: 3KB - Virtual size: 2KB

.bss
Size: - Virtual size: 528B

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 15KB - Virtual size: 14KB