339b9a2d2cf454e4bafdc88540e99e17 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

339b9a2d2cf454e4bafdc88540e99e17
Size

50KB
MD5

339b9a2d2cf454e4bafdc88540e99e17
SHA1

880f7ecaa52c7241ce94dec1273fc6c77688dda6
SHA256

5335a38c77c120e975b24f5f8854a55604411e27404c8c706bced05eccf1326c
SHA512

6ab2f643f14e39caf48e676427660074f94287ae0183e5d13c7ecaf7c88270eb816afed47c7ef6c63fdfdc4bef01091f05b312601f2508b693c94055f315bf21
SSDEEP

768:nGiIQV7eq7602rZeUh/7H9WzFmWWCgGq8zwi5Nh6dETCcD7fAcBZk4RYHU1VRRM+:x/VhrQZXDtWWoq88mf6I7IcBOMfRRM+

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
339b9a2d2cf454e4bafdc88540e99e17
unpack001/out.upx

Files

339b9a2d2cf454e4bafdc88540e99e17
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 2.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 48KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE