06aefa008a1918d9a4ffe9e7e23e2a1b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06aefa008a1918d9a4ffe9e7e23e2a1b
Size

6KB
MD5

06aefa008a1918d9a4ffe9e7e23e2a1b
SHA1

1b6858fb28a1ffdc4e00042890c711604c79fca3
SHA256

8e158ae1d2446e4785c2b38ad7a4cda41876f89d34b8304565309ee562173b7e
SHA512

f2aa134e07f773c6f2ce677bdc744bf9784f0e7a57b96880fae320ba322a30036653dcdf8590a86da949ed1bac8abbb2ce862242b0b6baeb1c8bb1b34c2f14c1
SSDEEP

96:jWwH2Cq8WbUPbLW1rWjNdTWI5kmk5WqWIHs:y82CH/DiCCI5N6c/

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
06aefa008a1918d9a4ffe9e7e23e2a1b
unpack001/out.upx

Files

06aefa008a1918d9a4ffe9e7e23e2a1b
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE