012f7c7d37a81fd84c81a7f56baa3adf | Triage

Sharing

General

Target

012f7c7d37a81fd84c81a7f56baa3adf
Size

13KB
MD5

012f7c7d37a81fd84c81a7f56baa3adf
SHA1

427e53abaf872c279545810f7e616e84c0579408
SHA256

1886de864b74072df40075a75d9048177e1abf14d2b2dfd34cae3ed8cf2d248f
SHA512

cb8290a7a7a8bc91bd02866e9706476e2c97fd70783ccbb5afcd117a17dd6cccc8963c13137c8adc18d8150891f5eae010fce1e122d5c9d49a784e85a0d58f6b
SSDEEP

192:yu/hi3spBziWZ91FRMRuVxtqtt6T6EvU7VjxCiX54M6WPqrC/42oq+vLtr9ZCspe:Hw3spBOWZoSxtscZvU7+iXXsLdAeMf

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
012f7c7d37a81fd84c81a7f56baa3adf
unpack001/out.upx

Files

012f7c7d37a81fd84c81a7f56baa3adf
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

code
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ