2c2d836c28111f7851b1d1959995b760 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c2d836c28111f7851b1d1959995b760
Size

758KB
MD5

2c2d836c28111f7851b1d1959995b760
SHA1

cef64f5bb5045121124bd376099c2575fafe6a05
SHA256

e578bf880b8b872232ce63f59251b1d6e459ef3db3cef8490fd849c35f57382c
SHA512

469299dd9d5fa4785225e0ed894d3e8983446b227bd048cb775d2d614cc800b893d53405f9e67b80a2c41d6e9de2003fa16ec35ccb7961b9aec1b50afe233669
SSDEEP

12288:tE3qGQY30WPlr+62DXDM3+ELE+vx+5flZ4ykt4FaK8m8cgQV/nBiFrB/4jdjAAsJ:tfY30WQ62eBEikxlO6aVm8cNiFN4jAAX

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
2c2d836c28111f7851b1d1959995b760
unpack001/out.upx

Files

2c2d836c28111f7851b1d1959995b760
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 124KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 729KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 104KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 664KB - Virtual size: 662KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ