072618f8e2f2c377c2375ac29b775e27 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

072618f8e2f2c377c2375ac29b775e27
Size

90KB
MD5

072618f8e2f2c377c2375ac29b775e27
SHA1

5be9fe75b47b208c53f6dec32c5f91919dbe5396
SHA256

f2f69303e1d07e78f61741e1fda699004d24d2c1438528614326a6e19b2ca9c5
SHA512

2408819d9ee2349e550889f72519f2ab57b5ee6c63adbaced4bc8b93c7db9bcdbbe125ca6a3e84148ba8350dc7dedbf632a2db477a12bc235556ff1e1500c57e
SSDEEP

1536:/MFSS57uOVKURN0Ewjjy1Ke7QcdNIibU4qk0MTkiJa2G5bNdJmKwuI8+Q+:/ESg7xAUfQOKe75U4dTk8G5dmKwuIpQ+

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
072618f8e2f2c377c2375ac29b775e27
unpack001/out.upx

Files

072618f8e2f2c377c2375ac29b775e27
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 168KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 88KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 172KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE