7bcd2e6fa92ce3f7cd86bcc62251db80 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7bcd2e6fa92ce3f7cd86bcc62251db80
Size

22KB
MD5

7bcd2e6fa92ce3f7cd86bcc62251db80
SHA1

f619e423117c3bb23f093e96c1a8ae942f8a1a77
SHA256

8eb14196d9543b61c494408afe0936ee1e425b4828fed90ab0cafc6e451996e5
SHA512

e24cefb2b003814f2668cc516f67534f7f3cd9e68e4b3059e08a3a55561311b2ae9178592035dffc0c8ab541243c5b4cbfaa6869f96ede393c583c7055eea35a
SSDEEP

384:n27RHjNZkmrbgmDZ/CEXDFKMLSgJFA/VH9H93vN7Z7WD:nA/ZkmHrDZ/Cip5+gjmd3vNVq

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
7bcd2e6fa92ce3f7cd86bcc62251db80
unpack001/out.upx

Files

7bcd2e6fa92ce3f7cd86bcc62251db80
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ