6d328e3e2a0a4c6802d75fa45bd11906 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d328e3e2a0a4c6802d75fa45bd11906
Size

73KB
MD5

6d328e3e2a0a4c6802d75fa45bd11906
SHA1

2a5be08d4033e272a778e999d299562f7cdd22fe
SHA256

e3edcfd70a31c9714df0118d7a4993358a36d00a02ab61a5b2cb177cb783165a
SHA512

7419756d300e710bce96f103de6091ec3c08a658a5517b5643028aa509623c7b681cf763db9050850c99a0ba4a50ba5f7fe6e1b50e8f3cba9fb7a19c31997b0b
SSDEEP

1536:hWU2hAzcfx9nKelYZ9Y4oHpPBwy//rMZWw:AU1cfx9nNYZ6PGy/zk5

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
6d328e3e2a0a4c6802d75fa45bd11906
unpack001/out.upx

Files

6d328e3e2a0a4c6802d75fa45bd11906
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ