0350b0d32a14c91b33b2372d62c7ffb6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0350b0d32a14c91b33b2372d62c7ffb6
Size

21KB
MD5

0350b0d32a14c91b33b2372d62c7ffb6
SHA1

689a2723055d19be1e5cc4992f93988b34f40b65
SHA256

38787ad450003e7d4edf9665fc4e7876cecfd9b4f33c88e74c87ae5d1040a789
SHA512

ebde9d43e94b44da9b5ad183deabbadd62708a05a3d734de1de594b71c6a823d053c0ce20cf602b5a220e2ac6748f92a0481f967b6b9e5861b4d91208340687f
SSDEEP

384:hJ/yw8+ZSMk6cXU9FxMhspVsJUzBl5xt3oL01IPWuGshHzfz:hJ6EVkhKYhcsJUdl5H3t1IPW2T

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
0350b0d32a14c91b33b2372d62c7ffb6
unpack001/out.upx

Files

0350b0d32a14c91b33b2372d62c7ffb6
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE