0923fcb9dda861553a7ff345722b4c6f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0923fcb9dda861553a7ff345722b4c6f
Size

5KB
MD5

0923fcb9dda861553a7ff345722b4c6f
SHA1

013122d9163d6d7e5147e0873083392c261e4a29
SHA256

7de02ae03f25ca2610b02bec830afb44fad6b57f95eb4057066815b00bd713a8
SHA512

949d5917bc8922bbe3ecc056de919aff52f66edc57075fc41e444e24be15d4aac791e59d38518eeda8abcef56dcf8ab6f443b0ad2ae83cb8d6bc2bd7c3232bf0
SSDEEP

96:4JusQxdu+sCREsju3xYpKa192YLrajCa:cusQGajuBYpP1921Oa

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
0923fcb9dda861553a7ff345722b4c6f
unpack001/out.upx

Files

0923fcb9dda861553a7ff345722b4c6f
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE