10ed613ee0b4385435d582b2ee719cb4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10ed613ee0b4385435d582b2ee719cb4
Size

5KB
MD5

10ed613ee0b4385435d582b2ee719cb4
SHA1

66ad08ebe8ce1c2f0887c811f8a22d6d2f3f38b6
SHA256

eb0ccc4c08a4ce635b28461f4d0c8459272141e1f6e604dbc8ad26e43ad621fb
SHA512

fda28dacff8e8154b811e98827d6c762ae395fb05ccdf35c3b029bc00e97d03365e00fd720b0b0732f9feeb56e081d8cd161d0c0b33d828b82d2fc3d9f6b94ea
SSDEEP

96:eiOrNsMws+I+1Oaq21Y7GiYWO77+niQTFxvvL8DO7DYvq66jPsVQizu8m:arNGvtq2ALO7oiQBJvL8yQi66jkVQizk

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
10ed613ee0b4385435d582b2ee719cb4
unpack001/out.upx

Files

10ed613ee0b4385435d582b2ee719cb4
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE