09a21c9532b6c9e51ced96eb10669c89 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09a21c9532b6c9e51ced96eb10669c89
Size

379KB
MD5

09a21c9532b6c9e51ced96eb10669c89
SHA1

785c91dc874c80095ba9a4adfaf2b12523d23987
SHA256

9d6a50a9d8e54014477909b7394d3b42454c4691c8ad85e6882b0acf5e8c2af8
SHA512

b833fe5cc1c86716760e833e9f2bba78738047f670a272df6c7e99ca443c42b7c77b0317d37f7539cc6f4f19c19d77441a41815729b8ceae1354129bbb9b731c
SSDEEP

6144:XaAj6q3775lWU289pyL7tJXQGJmuDmsM2HCMMRUMwQGHpWvs3UJ75HPLTE2XW:Xrj6q3fSUoL7tpQMDmsIMrpgE3UJ1vsk

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
09a21c9532b6c9e51ced96eb10669c89
unpack001/out.upx

Files

09a21c9532b6c9e51ced96eb10669c89
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 568KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 331KB - Virtual size: 332KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 616KB - Virtual size: 616KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ