47979e12ff855a9eca5b1620d625f0fd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47979e12ff855a9eca5b1620d625f0fd
Size

95KB
MD5

47979e12ff855a9eca5b1620d625f0fd
SHA1

a23e1d9ca14a7990e0968625d97f02f73bb8eef9
SHA256

3a47aa0beb9893a8136331677762170cf2bd114f7d1dd33c615d348316c2c33e
SHA512

e3e1789f4f6be0bfbcbaec53942af0773f7dc3a23c5bf319f2cbd66bd4acf2d709f2d2e2f160784321223f3069b56b1c80e4dedce23a9c34e1247b5cad7f82a3
SSDEEP

1536:NGgsu4h7Tv94bPN5x8+78ghyX/1vLrW4pJNN1ccXShF/fVuDWP5bqXDaFDNR:Su4hlyPRr9Y1hscSX8WUXDaF

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
47979e12ff855a9eca5b1620d625f0fd
unpack001/out.upx

Files

47979e12ff855a9eca5b1620d625f0fd
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 94KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 97B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE