1d30e76e8b6a037824656beb620d8531 | Triage

Sharing

General

Target

1d30e76e8b6a037824656beb620d8531
Size

52KB
MD5

1d30e76e8b6a037824656beb620d8531
SHA1

2e947bff5958ba32424b8135b5fb4e0db9b41c3b
SHA256

ad7b11c92a0ab17f09bcad22a5e1af0dcd5478ab928e962f00e6e993889dc783
SHA512

41069d68aa02ee3f157633becc85793c33409278c5760f100cc0110895c5b102317dfa17c2a045c1737326a1eba5d6e0c80448001d7fcd9226140456aa573a77
SSDEEP

1536:qqUf2FSgVUi6zDTPd8iRRwKVzmRnmdaxpz:qvfEiz3PZRmnmkxp

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
1d30e76e8b6a037824656beb620d8531
unpack001/out.upx

Files

1d30e76e8b6a037824656beb620d8531
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 168KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 51KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 212KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE