6dc74b484ae331333ca217aa32141811 | Triage

Sharing

General

Target

6dc74b484ae331333ca217aa32141811
Size

110KB
MD5

6dc74b484ae331333ca217aa32141811
SHA1

4ee5e22042a940fcaedf9ae1fbf83563549b932e
SHA256

e584f9c2a21b62f1f9615d926ad7de43169a83a3af3625d7d00ccf4c0d5eb4cb
SHA512

e787f8b0d3b2b45836cea34e613adbfbd9af37f3f49ec7545b5fb8044c1ce382358ca7c67fca484d7d7a6a376c69ed7c9a1f78ce2ce6e0878a881378c6fee3a0
SSDEEP

1536:Qjgq3Azs0Ny3s5T+d8wIx/02RWYqC/CFmQPOBZ4rEA27w0BNWUz3z7ifI:c4bNkYThx/02lBYW/cz27wYWC3P

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
6dc74b484ae331333ca217aa32141811
unpack001/out.upx

Files

6dc74b484ae331333ca217aa32141811
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 62KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ