6f005256215368bf34f2a55fe02efe16

General

Target

6f005256215368bf34f2a55fe02efe16
Size

37KB
MD5

6f005256215368bf34f2a55fe02efe16
SHA1

dde0c3c44a197478917a4fc98251a126cfe0ede0
SHA256

974ac75cc91de511af4af1b551df1925d2704d5133a615773c5c16900d15202a
SHA512

9bd05bc25f00c22c29a22025183776bdb609088def9a96090ff22f59e59e9f2589e64e61ec414f4ef8a3c2d8d11f9778d738455ddb90973b3fcce2e90e079754
SSDEEP

768:BpTMjUqiIFVD+oo0dm3pHOZAbr2KwwbxGYaE28FW3xc6WH9Zew6ukukT:BpwXFVD+mMpOZA/25YapWWa6iZY

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/out.upx

Files

6f005256215368bf34f2a55fe02efe16
.exe windows:4 windows x86 arch:x86

Code Sign

11:86:62:ab:02:bd:b6:6a:b3:91:d5:10:c3:97:52:5d
Certificate

Issuer

CN=long

Not Before

31/12/2008, 16:00

Not After

31/12/2014, 16:00

Subject

CN=long

Extended Key Usages

ExtKeyUsageCodeSigning

eb:38:1d:26:c3:10:90:ff:2f:0d:c8:90:69:0c:3b:30:87:5a:eb:cc
Signer

Actual PE Digest

eb:38:1d:26:c3:10:90:ff:2f:0d:c8:90:69:0c:3b:30:87:5a:eb:cc

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 108KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

11:86:62:ab:02:bd:b6:6a:b3:91:d5:10:c3:97:52:5dCertificate

Extended Key Usages

eb:38:1d:26:c3:10:90:ff:2f:0d:c8:90:69:0c:3b:30:87:5a:eb:ccSigner

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 108KB

UPX1 Size: 34KB - Virtual size: 36KB

.rsrc Size: 1024B - Virtual size: 4KB

Headers

File Characteristics

Sections

.text Size: 16KB - Virtual size: 12KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 112KB - Virtual size: 110KB

11:86:62:ab:02:bd:b6:6a:b3:91:d5:10:c3:97:52:5d
Certificate

eb:38:1d:26:c3:10:90:ff:2f:0d:c8:90:69:0c:3b:30:87:5a:eb:cc
Signer

UPX0
Size: - Virtual size: 108KB

UPX1
Size: 34KB - Virtual size: 36KB

.rsrc
Size: 1024B - Virtual size: 4KB

.text
Size: 16KB - Virtual size: 12KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 112KB - Virtual size: 110KB