11fb3e218c29422139d7c17a3f4394da | Triage

Sharing

General

Target

11fb3e218c29422139d7c17a3f4394da
Size

157KB
MD5

11fb3e218c29422139d7c17a3f4394da
SHA1

935fae9b81297bfb3099d4c2fd3c03258736c8fd
SHA256

dc3f303871df8a9d1dadf837979ca0e40ea5267be63be72ecd417f2190561b41
SHA512

8d95fa4dfa7854e2cf3675c67a921e399e0f1ef8c9619f03aacd8403abf1839955c10f10f646c31fe358aa9cd987be2c47f136d3c2fbcd8d70f4afcc27e72e55
SSDEEP

3072:AvTbEQ8nVYoCKFfYtz/ZfLmACossUrVKtgQ8fIutp6kTgQ5dtzcnBW:GbEQ+eoCK96xfh36VmyfIutpld

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
11fb3e218c29422139d7c17a3f4394da
unpack001/out.upx

Files

11fb3e218c29422139d7c17a3f4394da
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 154KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 223KB - Virtual size: 222KB

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size: