0c3036b7a9aa80b27ef011e04d00b8a2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c3036b7a9aa80b27ef011e04d00b8a2
Size

28KB
MD5

0c3036b7a9aa80b27ef011e04d00b8a2
SHA1

c23490053e401b248d056380646be6072505488a
SHA256

28c42f0c541990abe7539d7860b5666659dd1c7d374b3ddc07f9d2f674aa0e2d
SHA512

2e7ba63fb497a57dbca480b92ccd7ff2e745ed10f8da7faea13a0aebb741a7c17d0015028abfe2c2a32111188c4fcbe5f2ecced9f961d5702b56983d2ca4b353
SSDEEP

768:hwMMhelk3xh2uHL5oEYEeP2zxQ0b3ZFSuM4koR/S:htK3v3L5obEkw3Xe4zS

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
0c3036b7a9aa80b27ef011e04d00b8a2
unpack001/out.upx

Files

0c3036b7a9aa80b27ef011e04d00b8a2
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE