01d50048ccb434301f4b2d10088ad46b | Triage

Sharing

General

Target

01d50048ccb434301f4b2d10088ad46b
Size

77KB
MD5

01d50048ccb434301f4b2d10088ad46b
SHA1

4e8cd922549a2d8e07d3fa381aa830eab360eea3
SHA256

84f746fa1e760b4d27c3ee4a65ae256d6030bc6fa22511d618e134adb1776c7c
SHA512

01e7f164f0a73ab31b0460cf9a00a50a568d925f31649f2c68e750d5ec58fedb6750fe973a82d7589f9b6724a8c43d57f97b48502834a3f6cba4ac2878331cc2
SSDEEP

1536:QnFKoIDlA2OtM8JxOkaOUU/zLNs/3mvEfOAQf1juWh2b/mZRifsWEV7Qh0TEcdMV:QczyDuoOkakzIfO5fZBh2rYSstVI0T0V

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
01d50048ccb434301f4b2d10088ad46b
unpack001/out.upx

Files

01d50048ccb434301f4b2d10088ad46b
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 112KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 75KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE