7120f1cf9b59e1881bc26320f8ce65a4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7120f1cf9b59e1881bc26320f8ce65a4
Size

16KB
MD5

7120f1cf9b59e1881bc26320f8ce65a4
SHA1

15134c30c4a1e486fb3c1877e4ba80ce4b5e9904
SHA256

7151ee124c907738b7d7881ced873572c2d428c27c73c6cc0df13acf2b7d1a08
SHA512

b9160a0f3b9a57ff7c8ff6ce2219c52f0144b92f8a76d31827b69350010d2d3ea9f3d3b4f664d65bf4c5efada06f803036c142f6ebe4baed4a6f845c174ba41e
SSDEEP

192:4gBR8Umc2b5WAw4kj40HI2agaLnqhREHCjFZbe3ybUpq:tR8UfG56dHI2aNDqAHCB9eCbF

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
7120f1cf9b59e1881bc26320f8ce65a4
unpack001/out.upx

Files

7120f1cf9b59e1881bc26320f8ce65a4
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ