485a589c81d5d5bd7e923f87152cda5a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

485a589c81d5d5bd7e923f87152cda5a
Size

141KB
MD5

485a589c81d5d5bd7e923f87152cda5a
SHA1

43fa69ec84a7d2cb5281b184c390326a1979a3b0
SHA256

e6c05ead5427502eb6d5080f9f8f096ade7410e36004bb91f1b0e99c457e7043
SHA512

6f918a31b89c34cec2d36d967ad3e4807907677e5b9a845c1a09b1ac5f685fb918d0ebc137bf45b3f48bc9a6317923292e7146af68a16be5a33c3be18a321624
SSDEEP

3072:LuJ+TGwOtxeoK+rxU7yBAwsHJAY8sh6XVDVYdkJWmQ:G+TzyIbDDwiq/JGdkAmQ

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
485a589c81d5d5bd7e923f87152cda5a
unpack001/out.upx

Files

485a589c81d5d5bd7e923f87152cda5a
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 96KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ