61b0cbf71fcf00e0aa295de88c9ecc21 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61b0cbf71fcf00e0aa295de88c9ecc21
Size

33KB
MD5

61b0cbf71fcf00e0aa295de88c9ecc21
SHA1

d69b6bfd3a7d96d1e81012cf3f271886dcebe002
SHA256

cff26d32b4cc2543b3d6579831f9c7add712599170cb43df57b89f1fa0d10b5b
SHA512

8049b5982b0ea16fb427e61dd8cc149e8208a26cba96f29823e8e10267b204a2ddbf38e1e01a1129cb8142bf159586d22e31ffd6524a51d83b30b2649d09fda1
SSDEEP

768:UEP6I2AvToRrzQU3ybJGXH/N+YOk7J8HqakGSVGoySx0Bu:Umytrs8GMX/N+q8HqajodCu

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
61b0cbf71fcf00e0aa295de88c9ecc21
unpack001/out.upx

Files

61b0cbf71fcf00e0aa295de88c9ecc21
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ