624a503b290772c41dfd9e1b11af1cc6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

624a503b290772c41dfd9e1b11af1cc6
Size

4KB
MD5

624a503b290772c41dfd9e1b11af1cc6
SHA1

dca008c1e6c1b73b623e05e3f0fc1f7dd4c287a8
SHA256

cf36f65493925e160c9f542ad53a3580f3960742897a06a51cfdcc17f3eb9f0b
SHA512

f83492398948b08ba72c360229b34700f22c47e8bfd0ce8ad41bded71682494a72ff3b04bbc6ae30216a513b66727e04174a7fbdbf9d46449376c16fe9c6021c
SSDEEP

96:FHM5CyJw23r/pWJE7T1T+56Ymz7sQlqdqiAvo4:FHMzq2b/pnxSXmzgUqIVQ4

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
624a503b290772c41dfd9e1b11af1cc6
unpack001/out.upx

Files

624a503b290772c41dfd9e1b11af1cc6
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE